Payload Length Adjustment Vulnerability in Linux Kernel Affecting CALIPSO Integration

CVE-2026-99191

What is CVE-2026-99191?

The Linux kernel contains a vulnerability related to the CALIPSO integration that affects the correct adjustment of the payload length in BIG TCP packets. Specifically, when processing packets larger than IPV6_MAXPLEN, the payload length is incorrectly set, leading to potential miscommunication in network protocols. This vulnerability can cause issues for components reliant on accurate length values, including nf_tables and conntrack, which may incorrectly interpret packet sizes due to the faulty arithmetic operations. A fix ensures that the payload length reflects the actual size of the packet, preventing potential data loss or misrouting in network communications.

References