Linux Kernel Vulnerability in mv88e6xxx Product by Vendor

CVE-2026-98027

What is CVE-2026-98027?

A vulnerability in the Linux kernel's mv88e6xxx driver could lead to a buffer overflow due to improper handling of user-provided rule counts. Specifically, when the mv88e6xxx_get_rxnfc() function is called, it utilizes the rule count as a write index without properly validating it against the caller's buffer size. This flaw allows an attacker, even without CAP_NET_ADMIN privileges, to manipulate the ioctl sizes, leading to potential memory corruption. Such exploitation can expose systems to various security risks, necessitating immediate remediation.

References