CVE-2026-98526

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the llc alloc frame() function where link-layer headroom is reserved based solely on the device type. This approach is insufficient for stacked Ethernet devices, such as VLAN devices, because vlan dev hard header() adds a VLAN header before the lower device's Ethernet header. Consequently, an LLC response on these devices can cause an underflow of the skb headroom in eth header(). The skb (socket buffer) is the primary structure used by the Linux kernel to manage network packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.