Always-Incorrect Control Flow Implementation in Linux kernel - CVE-2026-80590
Published: August 28, 2026
Vulnerability identifier: #VU146295
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80590
CWE-ID: CWE-670
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper handling of gso metadata in inet fragment reassembly when processing crafted IP fragments with attached GSO state. A local user can write specially crafted packets to a tap device to cause a denial of service.
The issue can be triggered by an unprivileged user in its own user namespace, and it may also be reachable in environments where virtio_net_hdr metadata is forwarded to a tap device or where CAP_NET_RAW is available in a network namespace.
Affected software
Linux kernel
Fedora
kernel
Fedora
kernel
How to mitigate CVE-2026-80590
Install security update from vendor's repository.
kernel - addressed in versions 7.1.12-100.fc43, 7.1.12-200.fc44, 7.2.2-300.fc45
External References
- https://git.kernel.org/stable/c/14a8f3e10fa9a5abd6cedcdaa0c0b7ea9a09f234
- https://git.kernel.org/stable/c/29dda278a5ed272f2230ff4eaa23cf403107bba0
- https://git.kernel.org/stable/c/3edf721bb4b99d272c336631b44e3d8ff9a4f31b
- https://git.kernel.org/stable/c/69b73b74d9eb45f5560a8fe4fa406ada580e1340
- https://git.kernel.org/stable/c/c49f04e8d2b94dbb8d9fd99731dd3f00589c8ace
- https://git.kernel.org/stable/c/cfdbc8c2e6f9ef5d8b8e54859da03dfe682b0bee
- https://git.kernel.org/stable/c/da857e448322a2e871ce3ecc2900027041160d43
- https://git.kernel.org/stable/c/dec2edb7aaf12a8878b3a03172ea8fc277b8eaad