CVE-2026-98802Low· 3.7▾ SunlitA flaw was found in the Linux kernel. When processing IPv6 segment routing (seg6) headers, the kernel modifies routing and destination address fields without first ensuring that the network packet buffer is writable. If the packet buffer i…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 20.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
Last analysed / modified upstream
— → 3.7
none → low
A flaw was found in the Linux kernel. When processing IPv6 segment routing (seg6) headers, the kernel modifies routing and destination address fields without first ensuring that the network packet buffer is writable. If the packet buffer is shared or cloned, such as during packet inspection or capture, these modifications alter shared memory. A remote attacker sending network traffic could exploit this flaw to cause packet data corruption, resulting in inaccurate or altered data being received by local monitoring applications.
kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA — rated Low by Red Hat. Released 2026-10-18, updated 2026-10-23.
Affected:
No fix planned:
Not affected:
Fix deferred
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-63831High· 8.8In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_do_encrypt_unauth(), llsec_do_encrypt_auth(), llsec_do_decrypt_unauth(), and llsec_do_decrypt_auth() …
CVE-2026-106071Low· 3.6nodejs: nodejs: Permission model bypass via wildcard path matching flaw (CVE-2026-106071)
CVE-2026-106070Low· 3.7nodejs: Node.js: Security inspection bypass via crafted ZIP archive header mismatch (CVE-2026-106070)
CVE-2026-98873Low· 3.3kernel: netfilter: nf_conntrack_expect: zero at allocation time (CVE-2026-98873)
CVE-2026-98871Medium· 4.1kernel: crypto: ccp - Fix possible deadlock in SEV init failure path (CVE-2026-98871)
CVE-2026-98876Medium· 4.1kernel: host1x: bus: Fix missing ops null check in error teardown (CVE-2026-98876)