CVE-2026-97417

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()

The timestamp-only fast path dereferences the option stream as

*(__be32 *)ptr, which assumes 4-byte alignment that the TCP option

stream does not guarantee. Use get_unaligned_be32() instead, which

reads the value safely and already returns host byte order, so the

htonl() on the comparison constant can be dropped.

This matches the existing get_unaligned_be32() use later in the same

function.