Improper access control in Linux kernel - CVE-2026-80669
Published: August 28, 2026
Vulnerability identifier: #VU146123
CSH Severity: Low
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80669
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged user to cause a denial of service.
The vulnerability exists due to improper access control in the bpf lsm hook attachment handling for xfrm_decode_session when attaching a bpf lsm program to the xfrm_decode_session hook. A local privileged user can attach a crafted bpf lsm program that returns an error to cause a denial of service.
The issue is triggered because security_skb_classify_flow() invokes the hook from a void path and reaches BUG_ON() if an error is returned.
Affected software
Linux kernel
How to mitigate CVE-2026-80669
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/12091470c6b4c1c14b2de12dcbae2ada6cb6d20b
- https://git.kernel.org/stable/c/1bb3b6a5c3c5cc814eae4ff0212fdced36f8bce9
- https://git.kernel.org/stable/c/49fa1be621dde8f526d36e5791aded8fafda1e9c
- https://git.kernel.org/stable/c/4ae780d173ef40d4f7cb76935dc2d55fbf380009
- https://git.kernel.org/stable/c/6b44c6660aa1c9b843e450a623ac4a8484919dce
- https://git.kernel.org/stable/c/aa265d47308775c5501073b08133623bcb5421f9