CVE-2026-97417
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/09/2026
Última modificación:
25/09/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()<br />
<br />
The timestamp-only fast path dereferences the option stream as<br />
*(__be32 *)ptr, which assumes 4-byte alignment that the TCP option<br />
stream does not guarantee. Use get_unaligned_be32() instead, which<br />
reads the value safely and already returns host byte order, so the<br />
htonl() on the comparison constant can be dropped.<br />
<br />
This matches the existing get_unaligned_be32() use later in the same<br />
function.
Impacto
Puntuación base 3.x
7.50
Gravedad 3.x
ALTA