CVE-2026-98526

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98526
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98526.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98526
Downstream
Published
2026-10-18T15:17:44Z
Modified
2026-10-19T02:46:28Z
Summary
llc: reserve device headroom for allocated frames
Details

In the Linux kernel, the following vulnerability has been resolved:

llc: reserve device headroom for allocated frames

llc_alloc_frame() reserves link-layer headroom using the device type. This is insufficient for stacked Ethernet devices such as VLAN devices, where vlan_dev_hard_header() pushes a VLAN header before the lower device's Ethernet header. An LLC response on such a device can therefore underflow skb headroom in eth_header().

Use LL_RESERVED_SPACE() to account for the device's actual required headroom while preserving the existing LLC device-type check.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98526.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bf9ae5386bca8836c16e69ab8fdbe46767d7452a
Fixed
018020f5a48cc86fdd6dc2d380f6c70443ae7639
Fixed
3a3f57c4061d9e9cc3bc04205d36ce41ae3406c1
Fixed
7c38524b2b2456bd33cb360420da6cbf9cad1b33
Fixed
1937222c2511ac91377d39f28106c34734f5f8c6
Fixed
16ceac2daa89dd16917bc488ab05b9dd6961a603
Fixed
e06f8b6e27cc616d3c587e9784c4a033eb310a16
Fixed
3361c93e417384ebf28003e0fb6d5304653d3b05
Fixed
72b5b9a28b996e09b8b5b944370c79851bb68f52

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98526.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.34
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.55
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98526.json"