cyfenced.com →

[ CVE-2026-80844 · Published 4 Sep 2026 ]

Vulnerability in Linux

Not scored yet EPSS <1%5 agency advisoriesFix available

[ Why it matters ]Priority signals

  • Interim mitigation published by PrivacySafe

[ Description ]Official description

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than the number of addresses described by the routing header's hdrlen field. That assumption does not hold for raw IPv6 HDRINCL packets. A packet with hdrlen equal to 2 describes one address, but can carry an arbitrary segments_left value. With segments_left equal to 255, the function moves its address pointer 4,064 bytes backwards and passes a 4,064-byte length to memmove(), resulting in an out-of-bounds access. Validate the invariant locally before modifying the routing header or performing any address-pointer arithmetic, and propagate malformed-header errors to the existing AH6 input and output error paths.

[ Fixes ]Fixes and patches

  • Linux kernel module blockerInterim mitigation · PrivacySafe · List, check and reversible blocks for The Linux kernel on every distribution: stop any module from loading, with a list of 42 (recent exploits, older well known flaws, rarely needed attack surface), a status command and a rollback
  • Linux kernel local root quartetInterim mitigation · PrivacySafe · Check, opt-in protective measures (`mitigate`) and rollback for The Linux kernel on every distribution: four local privilege escalations with public exploits (IPsec AH6, TUN/TAP, PPPoE, SCTP), each fixed at a different release per branch

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1385

    Multiple vulnerabilities in VMware products Translated from French

    Multiple vulnerabilities have been discovered in VMware products. They allow an attacker to cause a security problem not specified by the vendor.

    CVE-2019-25013CVE-2017-9937CVE-2025-6395+4953 more CVEs
  • CERT-FRCERTFR-2026-AVI-1372

    Multiple vulnerabilities in SUSE products Translated from French

    Multiple vulnerabilities have been discovered in SUSE products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.

    CVE-2026-72436CVE-2026-74632CVE-2026-89702+616 more CVEs
  • CERT-FRCERTFR-2026-AVI-1335

    Multiple vulnerabilities in the SUSE Linux kernel Translated from French

    Multiple vulnerabilities have been discovered in the SUSE Linux kernel. Some of them allow an attacker to cause privilege escalation, remote denial of service and a breach of data confidentiality.

    CVE-2026-72436CVE-2026-74632CVE-2026-89702+602 more CVEs
  • CERT-FRCERTFR-2026-AVI-1289

    Multiple vulnerabilities in the Debian LTS Linux kernel Translated from French

    Multiple vulnerabilities have been discovered in the Debian LTS Linux kernel. Some of them allow an attacker to cause privilege escalation, a breach of data confidentiality and denial of service.

    CVE-2025-38237CVE-2025-39833CVE-2025-39925+1311 more CVEs
  • CERT-FRCERTFR-2026-AVI-1287

    Multiple vulnerabilities in the Red Hat Linux kernel Translated from French

    Multiple vulnerabilities have been discovered in the Red Hat Linux kernel. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service.

    CVE-2026-53230CVE-2026-53398CVE-2026-68480+96 more CVEs

[ References ]References