High severity7.5NVD Advisory· Published Sep 24, 2026· Updated Oct 3, 2026
CVE-2026-97417
CVE-2026-97417
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()
The timestamp-only fast path dereferences the option stream as *(__be32 *)ptr, which assumes 4-byte alignment that the TCP option stream does not guarantee. Use get_unaligned_be32() instead, which reads the value safely and already returns host byte order, so the htonl() on the comparison constant can be dropped.
This matches the existing get_unaligned_be32() use later in the same function.
Affected products
78- osv-coords77 versionspkg:linux/kernelpkg:rpm/almalinux/bpftoolpkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rv
>= 3.1.0, < 5.10.271+ 76 more
- (no CPE)range: >= 3.1.0, < 5.10.271
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.rt7.512.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 4.18.0-553.171.1.el8_10
- (no CPE)range: < 6.12.0-211.63.1.el10_2
- (no CPE)range: < 6.12.0-211.63.1.el10_2
Patches
Vulnerability mechanics
References
7- git.kernel.org/stable/c/0d5ad732e4fdc569eb85861115e8f7b4c2c67852nvd
- git.kernel.org/stable/c/4abc1af7ac209c066f4e5dd75cdd56876e5829a9nvd
- git.kernel.org/stable/c/55bcc3376cd7b18954cc9814da697504fdaf12bfnvd
- git.kernel.org/stable/c/740ad3d17a281f7764dda4dbeb37cea52e2e31aenvd
- git.kernel.org/stable/c/7ecfa46a536578a7ed335ddf31a854127268c27cnvd
- git.kernel.org/stable/c/a0523267de2523522b0f70972dd1ffa22ec6176cnvd
- git.kernel.org/stable/c/d3bf9eae486490832bd08fd62ab0ac601f346bd4nvd
News mentions
0No linked articles in our index yet.