CVE-2026-80613

A flaw was found in the Linux kernel's veth component. An error in the rollback mechanism during XDP eXpress Data Path enablement can lead to a Networked Asynchronous Packet Interface NAPI structure not being properly deallocated. This results in a Use-After-Free UAF vulnerability, where freed...

EUVD-2026-67489

In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path During XDP enablement in veth, if xdprxqinforeg or xdprxqinforegmemmodel fails, the driver rolls back the changes. However, the rollback loop: for i--; i = start; i-- decrements the lo...

CVE-2026-74742

A flaw was found in the Linux kernel's veth component. In a multi-queue setup without an eXpress Data Path XDP program attached, the vethpoll function incorrectly derives the index of the peer transmit TX queue to wake. This can cause a TX queue to stop indefinitely if it becomes full, as the...

CVE-2026-74612

A flaw was found in the Linux kernel's veth component. A remote attacker could exploit incorrect packet buffer skb length accounting after an eXpress Data Path XDP fragment adjustment. This could lead to the disclosure of sensitive kernel memory information to userspace and corruption or truncati...

CVE-2021-47099

In the Linux kernel, the following vulnerability has been resolved: veth: ensure skb entering GRO are not cloned. After commit d3256efd8e8b "veth: allow enabling NAPI even without XDP", if GRO is enabled on a veth device and TSO is disabled on the peer device, TCP skbs will go through the NAPI...