CVE-2026-97614: Linux kernel · net: dsa: tag_brcm: legacy FCS: request needed tailroom
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in 709451db123d90743fa9104b48f324a8e49f8c6f : patch Linux kernel soon.
Data as of 26 Oct 2026, 14:05 UTC
Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 709451db123d90743fa9104b48f324a8e49f8c6f, 5be081b83abd3f17d908953b4bb77279f5a149e3, 3eb5c7e1c154c74568620a25c6751bb8d6d8d728
Exploitation evidence
Disclosed: evidence found.
CVE published 25 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 709451db123d90743fa9104b48f324a8e49f8c6f, 5be081b83abd3f17d908953b4bb77279f5a149e3 or 3eb5c7e1c154c74568620a25c6751bb8d6d8d728.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix is available in the Linux kernel as identified by the fixed commit hashes. Users should upgrade from version 6.17 to a patched version containing these commits. No additional mitigation is required once the fix is applied.
Description
A vulnerability in the Linux kernel's DSA tag_brcm legacy FCS tagger caused out-of-bounds memory reads when processing nonlinear socket buffers (skbs). The tagger calculated CRC over skb data without accounting for required tailroom, leading to reads into unrelated memory. This flaw was fixed by declaring the needed tailroom, causing the networking core to linearize skbs before CRC calculation.