CVE-2026-98805: Linux 5.5

Affected technology

Linux · fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to before 5c8ce13c792e28d56f9ec3cd6728d8225bc0e3a2, fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to before f74f100e49588c1dbdc6ab3ba9e2c67b36d015d0, fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to before 60e0c2aeaa605ff19ca4e65126a35643d4d7ee1c, fc1b6d6de2208774efd2a20bf0daddb02d18b1e0 to before 512ccd3d0e91e791fb37442aa0a2599aca19783d
Linux

Linux · 5.5
Linux

Component: Not specified by the source
File: net/tipc/crypto.c

What an attacker can do

An attacker can exploit CTR malleability to alter captured ciphertexts and use the recovered authentication key to compute a valid tag for the modified ciphertext, under the same key and nonce.