CVE-2026-80840

CVE-2026-80840 is a slab-out-of-bounds write in the Linux kernel IPv6 Segment Routing (seg6) code. When End.DX4 or End.DT4 decapsulates an inner IPv4 packet via decap_and_validate(), the skb retains stale IP6CB data that overlaps with IPCB fields. A crafted outer Destination Options header sets o...

kernel: ip6_vti: fix slab-use-after-free in decode_session6

A use-after-free vulnerability was found in the IPv6 VTI Virtual Tunnel Interface implementation in the Linux kernel. When an IPv6 VTI device uses the SFB Stochastic Fair Blue qdisc, the control block cb field of an skb can be modified during packet enqueuing. The decodesession6 function then rea...

UBUNTU-CVE-2021-47515

In the Linux kernel, the following vulnerability has been resolved: seg6: fix the iif in the IPv6 socket control block When an IPv4 packet is received, the iprcvcore... sets the receiving interface index into the IPv4 socket control block v5.16-rc4, net/ipv4/ipinput.c line 510: IPCBskb-iif =...