UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-98526

In the Linux kernel, the following vulnerability has been resolved: llc: reserve device headroom for allocated frames llc_alloc_frame() reserves link-layer headroom using the device type. This is insufficient for stacked Ethernet devices such as VLAN devices, where vlan_dev_hard_header() pushes a VLAN header before the lower device's Ethernet header. An LLC response on such a device can therefore underflow skb headroom in eth_header(). Use LL_RESERVED_SPACE() to account for the device's actual required headroom while preserving the existing LLC device-type check.

Properties

Last source
FIRST EPSS
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.0022
Cve id
CVE-2026-98526
First seen by Signal
2026-10-18T18:05:58+00:00
Retrieved at
2026-10-21T01:24:51+00:00
Published at
2026-10-18T16:17:04.063
Last modified
2026-10-19T10:19:07.830
Epss percentile
0.1171

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-98526 — Ninja Signal Threat Intelligence | Ninja Signal