CVE-2026-80978

In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...

EUVD-2026-76301

In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...

CVE-2026-80978

CVE-2026-80978 affects the Linux kernel networking subsystem, specifically the IP tunnel devices. When a local attacker stacks user-created IP tunnel devices, the derived needed_headroom can exceed the 16-bit skb header offset range, causing those offsets to wrap during skb head expansion. The fi...

PT-2026-90108

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description IP tunnel devices derive their advertised needed headroom from lower output devices. In stacked configurations of user-created devices, this derived value can exceed the capacity of 16-b...

PT-2026-85717

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the batman-adv module where the batadv tvlv call handler function sets network and transport header fields from a received multicast TVLV without verifying if the TVLV...