Linux Kernel Shared Fragment Management Vulnerability Affecting Multiple Versions

CVE-2026-99284

What is CVE-2026-99284?

The vulnerability exists in the Linux kernel's networking subsystem, specifically in the skb_zerocopy() function. When transferring fragment descriptors between socket buffers, the function fails to copy the shared fragment marker flags accurately. This oversight can result in the erroneous behavior of later processes that depend on the integrity of the shared fragment marker. Consequently, this may allow unprivileged users to manipulate network data, leading to potential unauthorized writes to the page cache of protected files. To mitigate this issue, it is advised that all installations of affected Linux kernel versions be promptly updated to ensure the correct propagation of shared fragment markers during buffer operations.

References