{"id":"CVE-2026-98802","title":"kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA (CVE-2026-98802)","summary":"A flaw was found in the Linux kernel. When processing IPv6 segment routing (seg6) headers, the kernel modifies routing and destination address fields without first ensuring that the network packet buffer is writable. If the packet buffer i…","severity":"low","cvss":3.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvssSource":"vendor","cwe":"CWE-820","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","affected":["enterprise_linux 10","enterprise_linux 9","openshift_container_platform 4"],"published":"2026-10-18","updated":"2026-10-23","sourceUpdated":"2026-10-23T15:36:07+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98802.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98802.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98802"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555102"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98802"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98802"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98802.mbox"},{"url":"https://git.kernel.org/stable/c/e9141fdb7a2ead48cfcd60c681aba91d3014255b"},{"url":"https://git.kernel.org/stable/c/8ae3f4067ba4ae3a15581392f6dac422e3d3def0"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00155,"epssPercentile":0.04615,"ingestedAt":"2026-10-18T16:47:32.482Z","slug":"CVE-2026-98802","body":"## Overview\n\nA flaw was found in the Linux kernel. When processing IPv6 segment routing (seg6) headers, the kernel modifies routing and destination address fields without first ensuring that the network packet buffer is writable. If the packet buffer is shared or cloned, such as during packet inspection or capture, these modifications alter shared memory. A remote attacker sending network traffic could exploit this flaw to cause packet data corruption, resulting in inaccurate or altered data being received by local monitoring applications.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98802.json)\n\n**kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA** — rated Low by Red Hat. Released 2026-10-18, updated 2026-10-23.\n\nAffected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\nNot affected:\n\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat OpenShift Container Platform 4\n\n## Remediation\n\nFix deferred","depth":"sunlit","depthScore":20,"depthScoreParts":{"impact":20.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":228716,"id":"CVE-2026-98802","ts":1792844934908,"field":"cvss","old":null,"new":"3.7"},{"seq":228715,"id":"CVE-2026-98802","ts":1792844934908,"field":"severity","old":"none","new":"low"}]}