CVE-2026-98097 is a medium severity vulnerability in the Linux kernel's TIPC protocol implementation. It involves sending random padding bytes in RESET and ACTIVATE messages due to improper use of strcpy instead of memcpy or strscpy. This could lead to unintended data disclosure from kernel memory to remote systems. The issue has been resolved by replacing strcpy calls with safer functions that ensure zero-padded interface names are sent instead of random bytes.