CVE-2026-98274
Description
A flaw was found in the Linux kernel's networking subsystem. A local user could trigger a Denial of Service (DoS) or system instability by configuring a network socket to use both PSP encryption and a TCP Upper Layer Protocol (ULP), such as TLS. Because these features conflict in how they track decrypted packet data and validate outgoing traffic, using them together results in inconsistent kernel socket states.
Statement
This vulnerability is rated as Low severity because triggering it requires local access and the concurrent setup of mutually exclusive socket parameters to produce a denial of service. In typical Red Hat environments, PSP encryption is not part of standard network configurations, and simultaneous attachment with upper layer protocols such as TLS represents an atypical use case. Consequently, the real-world operational risk remains limited to systems where local accounts can manipulate specialized network socket options.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
