Threats Tagged 'ghsa-gwmg-q555-3325'

A high severity vulnerability (CVE-2026-64422) in the Linux kernel's IPv4 TCP stack allowed invalid negative values for the tcp_reordering sysctl to wrap and cause out-of-bounds reads during MTU probing. This was due to improper validation of sysctl writes and signed integer overflow in tcp_mtu_probe(). The issue has been resolved by adding validation to sysctl inputs and hardening the MTU probe size calculation.