CVE-2026-98805
Description
A flaw was found in the Linux kernel's TIPC (Transparent Inter-Process Communication) module. A network attacker who intercepts cluster communications can achieve information disclosure and alter transmitted data. This vulnerability occurs because TIPC resets encryption sequence counters during peer key updates, leading to the reuse of cryptographic numbers used once (nonces) with the same active encryption key. By exploiting this nonce reuse, an attacker can extract authentication keys and forge modified packets across the network.
Statement
Red Hat has evaluated this issue as having a security impact of Important because an unauthenticated network attacker who intercepts cluster communication can recover cryptographic authentication keys and tamper with encrypted traffic. Under standard configurations of Red Hat Enterprise Linux, the tipc module is not loaded by default, limiting the potential exposure to systems explicitly utilizing TIPC clustering. Furthermore, the vulnerability is constrained to deployments where peer-to-peer encryption is active and undergoing key renewal.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7.4 | N/A | N/A |
| Attack Vector | Network | N/A | N/A |
| Attack Complexity | High | N/A | N/A |
| Privileges Required | None | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | High | N/A | N/A |
| Integrity Impact | High | N/A | N/A |
| Availability Impact | None | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
