Network Filtering Vulnerability in Linux Kernel

CVE-2026-99211

What is CVE-2026-99211?

A vulnerability in the Linux kernel allows unprivileged users to disclose sensitive information through socket filters. Specifically, netlink producers may reserve headroom without resetting network and MAC headers. This can enable reading of uninitialized data through improper message handling, posing a potential risk to network security. The issue is mitigated by resetting headers before processing in unicast and broadcast delivery, preventing unintended data exposure.

References