Live › vulnerability › CVE-2026-98526
Go to dashboardThe Linux kernel's LLC frame allocator reserves too little link-layer headroom for stacked Ethernet devices such as VLAN interfaces. An LLC response sent on such a device can underflow the socket buffer headroom in eth_header().
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
llc: reserve device headroom for allocated frames
llc_alloc_frame() reserves link-layer headroom using the device type. This is insufficient for stacked Ethernet devices such as VLAN devices, where vlan_dev_hard_header() pushes a VLAN header before the lower device's Ethernet header. An LLC response on such a device can therefore underflow skb headroom in eth_header().
Use LL_RESERVED_SPACE() to account for the device's actual required headroom while preserving the existing LLC device-type check.
This page as .md · .json · in your agent: get_signal("CVE-2026-98526")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.