Threat Investigation
Request a demo

CVE-2026-98383

High

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL program can invalidate its cached SRH with bpf_lwt_seg6_adjust_srh() and then call bpf_skb_pull_data(). The latter may reallocate skb->head, leaving the per-CPU SRH pointer dangling. Post-program SRH validation then writes through that pointer. Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL programs so the verifier rejects this unsafe helper combination. Other LWT program types continue to expose the helper through lwt_out_func_proto().

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedOct 9, 2026
First seenOct 9, 2026

How to fix

Update
  • Linux Linux0f38472a2aa8704a6b514c0dfa9c32f3672b8f32, cae8674489f26edf7553fdd660599466cbb4c32f, 9f9e57b5a3a033f95f49ef9d541340cdbcb80abb, df0072be6fc373cb22f9ea854d458b04e32a03cf, b9bb0e735460751b620156f800a4279a28573392, 37b18688cd18fd86d2f35c212df1611862a26cd5, fca71ead7a20290af1e2046983eeafae43d21af1, e4a62833adff6ef0fe7c0b90393204fe3c26b5c5 or later

Affected products

ProductAffected versionsFixed in
Linux Linux004d4b274e2a1a895a0e5dc66158b90a7d463d44 ≤ v < 0f38472a2aa8704a6b514c0dfa9c32f3672b8f32, 004d4b274e2a1a895a0e5dc66158b90a7d463d44 ≤ v < cae8674489f26edf7553fdd660599466cbb4c32f, 004d4b274e2a1a895a0e5dc66158b90a7d463d44 ≤ v < 9f9e57b5a3a033f95f49ef9d541340cdbcb80abb, 004d4b274e2a1a895a0e5dc66158b90a7d463d44 ≤ v < df0072be6fc373cb22f9ea854d458b04e32a03cf, 004d4b274e2a1a895a0e5dc66158b90a7d463d44 ≤ v < b9bb0e735460751b620156f800a4279a28573392, 004d4b274e2a1a895a0e5dc66158b90a7d463d44 ≤ v < 37b18688cd18fd86d2f35c212df1611862a26cd5, 004d4b274e2a1a895a0e5dc66158b90a7d463d44 ≤ v < fca71ead7a20290af1e2046983eeafae43d21af1, 004d4b274e2a1a895a0e5dc66158b90a7d463d44 ≤ v < e4a62833adff6ef0fe7c0b90393204fe3c26b5c5, 4.180f38472a2aa8704a6b514c0dfa9c32f3672b8f32, cae8674489f26edf7553fdd660599466cbb4c32f, 9f9e57b5a3a033f95f49ef9d541340cdbcb80abb, df0072be6fc373cb22f9ea854d458b04e32a03cf, b9bb0e735460751b620156f800a4279a28573392, 37b18688cd18fd86d2f35c212df1611862a26cd5, fca71ead7a20290af1e2046983eeafae43d21af1, e4a62833adff6ef0fe7c0b90393204fe3c26b5c5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.