VLAN Processing Issue in Linux Kernel Affects Packet Transmission

CVE-2026-98377

What is CVE-2026-98377?

A vulnerability in the Linux kernel affects VLAN processing, allowing for improper handling of MAC headers during packet transmission. This issue occurs in the __vlan_insert_inner_tag() function, which inadequately verifies the presence of required MAC header bytes before rewriting memory areas, thereby potentially exposing sensitive data from uninitialized memory. The vulnerability could allow crafted packets to be improperly transmitted, putting network data integrity at risk. To mitigate this vulnerability, it is essential for the MAC header to be present, ensuring that improperly formatted frames are blocked from transmission.

References