CVE-2026-80978

🗓️ 11 Sep 2026 19:42:39Reported by LinuxType

Linux kernel IP tunnel headroom exceeds 16-bit offset bounds causing skb wrap in stacked configs.

Reporter	Title	Published	Views	Family All 128
Cvelist	CVE-2026-80978 net: cap advertised IP tunnel headroom	11 Sep 202619:42	–	cvelist
Debian	[SECURITY] [DSA 6528-1] linux security update	29 Sep 202609:49	–	debian
Debian CVE	CVE-2026-80978	11 Sep 202619:42	–	debiancve
Tenable Nessus	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	29 Sep 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-80978	12 Sep 202600:00	–	nessus
EUVD	EUVD-2026-76301	11 Sep 202619:42	–	euvd
NVD	CVE-2026-80978	11 Sep 202620:19	–	nvd
OPENSUSE Linux	kernel-devel-7.2.6-1.1 on GA media (moderate)	20 Sep 202600:00	–	opensuse
OSV	AZL-100806 CVE-2026-80978 affecting package kernel 6.6.152.1-1	11 Sep 202620:19	–	osv
OSV	BELL-CVE-2026-80978	15 Sep 202606:05	–	osv

Vulners

CNA

Node

linux linux_kernelRange3.11–5.10.270

linux linux_kernelRange5.11.0–5.15.221

linux linux_kernelRange5.16.0–6.1.188

linux linux_kernelRange6.2.0–6.6.157

linux linux_kernelRange6.7.0–6.12.109

linux linux_kernelRange6.13.0–6.18.50

linux linux_kernelRange6.19.0–7.2.4

linux linux_kernelRange7.3.0–7.3-rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "include/net/ip_tunnels.h",
      "net/ipv4/ip_tunnel.c",
      "net/ipv6/ip6_gre.c",
      "net/ipv6/ip6_tunnel.c",
      "net/ipv6/sit.c"
    ],
    "versions": [
      {
        "version": "1a37e412a0225fcba5587f24c0dfc7636efc8b69",
        "lessThan": "fb889a619723032140f5d983a3a34d25a5a2bed4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a37e412a0225fcba5587f24c0dfc7636efc8b69",
        "lessThan": "b160422f8103574425e2834130e169d84c94fa1d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a37e412a0225fcba5587f24c0dfc7636efc8b69",
        "lessThan": "d36e75f5669140b66515ad3a176ca6337bd80a5e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a37e412a0225fcba5587f24c0dfc7636efc8b69",
        "lessThan": "84783961cb8bdb36b4f41a02ce43aafc6d52b176",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a37e412a0225fcba5587f24c0dfc7636efc8b69",
        "lessThan": "bc4e05ae66c9797a0972ac44326e69c5305e0020",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a37e412a0225fcba5587f24c0dfc7636efc8b69",
        "lessThan": "af0ee8f04bea22cdb331fa3509e17f81b48938ad",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a37e412a0225fcba5587f24c0dfc7636efc8b69",
        "lessThan": "9144f2c53a04465a6878172b523f640313c5559e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1a37e412a0225fcba5587f24c0dfc7636efc8b69",
        "lessThan": "6b222adeb9340306e2ff97127c76117abb9b3df8",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "include/net/ip_tunnels.h",
      "net/ipv4/ip_tunnel.c",
      "net/ipv6/ip6_gre.c",
      "net/ipv6/ip6_tunnel.c",
      "net/ipv6/sit.c"
    ],
    "versions": [
      {
        "version": "3.11",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.11",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.270",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.221",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.109",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.50",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.4",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/d36e75f5669140b66515ad3a176ca6337bd80a5e
git	www.git.kernel.org/stable/c/9144f2c53a04465a6878172b523f640313c5559e
git	www.git.kernel.org/stable/c/b160422f8103574425e2834130e169d84c94fa1d
git	www.git.kernel.org/stable/c/84783961cb8bdb36b4f41a02ce43aafc6d52b176
git	www.git.kernel.org/stable/c/6b222adeb9340306e2ff97127c76117abb9b3df8
git	www.git.kernel.org/stable/c/af0ee8f04bea22cdb331fa3509e17f81b48938ad
git	www.git.kernel.org/stable/c/fb889a619723032140f5d983a3a34d25a5a2bed4
git	www.git.kernel.org/stable/c/bc4e05ae66c9797a0972ac44326e69c5305e0020

14 Sep 2026 13:18Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.8

EPSS0.00176