CVE-2026-80590

CVE-2026-80590 is a Linux kernel local denial-of-service vulnerability in the inet fragment reassembly path. When a virtio_net_hdr (via tun/tap or AF_PACKET with PACKET_VNET_HDR) marks an IPv4 or IPv6 fragment as GSO, the reassembled skb retains stale GSO state. The next segmentation point (e.g.,...