{"id":"CVE-2026-98805","title":"kernel: tipc: prevent GCM nonce reuse on peer key changes (CVE-2026-98805)","summary":"A flaw was found in the Linux kernel's TIPC (Transparent Inter-Process Communication) module. A network attacker who intercepts cluster communications can achieve information disclosure and alter transmitted data. This vulnerability occurs…","severity":"high","cvss":7.4,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","cvssSource":"vendor","cwe":"CWE-323","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","affected":["enterprise_linux 10","enterprise_linux 8","enterprise_linux 9","openshift_container_platform 4"],"published":"2026-10-18","updated":"2026-10-23","sourceUpdated":"2026-10-23T16:34:15+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98805.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98805.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98805"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555158"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98805"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98805"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98805.mbox"},{"url":"https://git.kernel.org/stable/c/a85a3dce4b6c73ddaa1e9725b906249744bf7cf2"},{"url":"https://git.kernel.org/stable/c/5c8ce13c792e28d56f9ec3cd6728d8225bc0e3a2"},{"url":"https://git.kernel.org/stable/c/f74f100e49588c1dbdc6ab3ba9e2c67b36d015d0"},{"url":"https://git.kernel.org/stable/c/60e0c2aeaa605ff19ca4e65126a35643d4d7ee1c"},{"url":"https://git.kernel.org/stable/c/512ccd3d0e91e791fb37442aa0a2599aca19783d"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00133,"epssPercentile":0.02808,"ingestedAt":"2026-10-18T16:47:32.480Z","slug":"CVE-2026-98805","body":"## Overview\n\nA flaw was found in the Linux kernel's TIPC (Transparent Inter-Process Communication) module. A network attacker who intercepts cluster communications can achieve information disclosure and alter transmitted data. This vulnerability occurs because TIPC resets encryption sequence counters during peer key updates, leading to the reuse of cryptographic numbers used once (nonces) with the same active encryption key. By exploiting this nonce reuse, an attacker can extract authentication keys and forge modified packets across the network.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98805.json)\n\n**kernel: tipc: prevent GCM nonce reuse on peer key changes** — rated Important by Red Hat. Released 2026-10-18, updated 2026-10-23.\n\nAffected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\nNot affected:\n\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n\n## Remediation\n\nAffected","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":40.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":228709,"id":"CVE-2026-98805","ts":1792844924985,"field":"cvss","old":null,"new":"7.4"},{"seq":228708,"id":"CVE-2026-98805","ts":1792844924985,"field":"severity","old":"none","new":"high"}]}