[CVE-2026-97229] GitLab Community Edition and Enterprise Edition — GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

What happened?

GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes).

Key details

• Linux Kernel has a missing variable initialization vulnerability.
• The flaw allows unintended modification of page-cache-backed data.
• Failure to preserve shared-fragment marker during socket buffer coalescing causes the issue.
• ESP input processing decrypts shared fragments in place as a result.
• This vulnerability can be chained with CVE-2026-109618 and CVE-2026-109619.
• Forensic triage is required per BOD 26-04.

Summarised by SecOraLens from CISA KEV. Always read the original source before acting. How SecOraLens verifies advisories.