CVE-2026-97612 Linux CVE debrief

Who should care

Defenders responsible for Linux kernel and Open vSwitch deployments should assess exposure and prioritize patching. This vulnerability can lead to denial-of-service attacks in environments using Open vSwitch.

Why it matters

CVE-2026-97612 is a Linux kernel vulnerability in the MPLS implementation that can cause denial-of-service attacks. Defenders should prioritize patching and verifying Open vSwitch configurations.

• Denial of service due to miscalculated network header offset
• Potential for large memcpy operations out of bounds
• Need for patching Linux kernel versions affected by this vulnerability
• Verification of Open vSwitch configurations and packet handling

Technical summary

The Linux kernel's MPLS implementation has a vulnerability that can cause a denial of service. When Open vSwitch recirculates a packet, the inner network header offset is not properly cleared, leading to a miscalculated network header offset. This results in a large memcpy operation out of bounds. The vulnerability has been resolved by clearing the inner protocol when the last label is popped. Affected product deployments should be verified, and patches applied to prevent denial-of-service attacks. The vulnerability was resolved in the Linux kernel, and official references are available from the CVE Program and the Linux kernel repository.

Defensive priority

Defenders should prioritize verifying and applying patches for Linux kernel versions affected by this vulnerability, particularly in environments using Open vSwitch.

Recommended defensive actions

• Verify and apply Linux kernel patches for CVE-2026-97612
• Review Open vSwitch configurations and ensure proper packet handling
• Monitor for unusual network activity and potential denial-of-service attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The vulnerability was discovered and resolved in the Linux kernel. Official references are available from the CVE Program and the Linux kernel repository. The issue arises when Open vSwitch (OVS) recirculates a packet and the inner network header offset is not properly cleared, leading to a denial-of-service attack. Defenders should verify and apply patches for Linux kernel versions affected by this vulnerability, particularly in environments using Open vSwitch. Evidence of the vulnerability's resolution can be found in the Linux

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.