Network Vulnerability in Linux Kernel Affects Transport Header Handling

CVE-2026-98402

What is CVE-2026-98402?

A vulnerability in the Linux kernel related to ICMP handling can lead to warning messages when the transport header is accessed without proper validation. Specifically, the issue arises in scenarios where the packet type is not UDP, causing attempts to parse the transport header incorrectly. This can happen under various network conditions like link failures or ARP errors, resulting in uninitialized transport header access. The fix involves ensuring transport header parsing is only performed when the protocol is verified as UDP, thereby enhancing overall network reliability.

References