The vulnerability of the functions copy_to_user_aead(), copy_to_user_ealg(), and copy_to_user_state_extra() in the net/xfrm/xfrm_user.c file of the XFRM/IPsec subsystem in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the functions copytouseraead, copytouserealg, and copytouserstateextra in the net/xfrm/xfrmuser.c sub-module of the XFRM/IPsec subsystem in Linux operating systems is related to insufficient control over resources with dynamic management. Exploitation of this vulnerability...

CVE-2026-80846

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...