---
id: CVE-2026-98802
title: >-
  kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA
  (CVE-2026-98802)
summary: >-
  A flaw was found in the Linux kernel. When processing IPv6 segment routing
  (seg6) headers, the kernel modifies routing and destination address fields
  without first ensuring that the network packet buffer is writable. If the
  packet buffer i…
severity: low
cvss: 3.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N'
cvssSource: vendor
cwe: CWE-820
vendor: Red Hat
product: Red Hat Enterprise Linux 9
affected:
  - enterprise_linux 10
  - enterprise_linux 9
  - openshift_container_platform 4
published: '2026-10-18'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T15:36:07+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98802.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98802.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-98802'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2555102'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-98802'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-98802'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98802.mbox
  - url: 'https://git.kernel.org/stable/c/e9141fdb7a2ead48cfcd60c681aba91d3014255b'
  - url: 'https://git.kernel.org/stable/c/8ae3f4067ba4ae3a15581392f6dac422e3d3def0'
tags:
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00155
epssPercentile: 0.04615
ingestedAt: '2026-10-18T16:47:32.482Z'
---

## Overview

A flaw was found in the Linux kernel. When processing IPv6 segment routing (seg6) headers, the kernel modifies routing and destination address fields without first ensuring that the network packet buffer is writable. If the packet buffer is shared or cloned, such as during packet inspection or capture, these modifications alter shared memory. A remote attacker sending network traffic could exploit this flaw to cause packet data corruption, resulting in inaccurate or altered data being received by local monitoring applications.

## Vendor advisories

- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-23 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98802.json)

**kernel: seg6: ensure packet data is writable before modifying SRH and IPv6 DA** — rated Low by Red Hat. Released 2026-10-18, updated 2026-10-23.

Affected:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

No fix planned:

- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9
- Red Hat OpenShift Container Platform 4

Not affected:

- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat OpenShift Container Platform 4

## Remediation

Fix deferred