SUSE CVE-2026-80738

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type ARGPTRTOBTFIDSOCKCOMMON. However, they access sk-skprotocol without validating...

CVE-2026-80735

In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref skuserdata Some subsystems, like BPF SOCKMAP, set skuserdata without actually setting the encaptype. For this reason, we must make sure that the type is the one ovpn expects befor...

CVE-2026-80738

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type ARGPTRTOBTFIDSOCKCOMMON. However, they access sk-skprotocol without validating...

UBUNTU-CVE-2026-80738

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type ARGPTRTOBTFIDSOCKCOMMON. However, they access sk-skprotocol without validating...

UBUNTU-CVE-2026-80735

In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref skuserdata Some subsystems, like BPF SOCKMAP, set skuserdata without actually setting the encaptype. For this reason, we must make sure that the type is the one ovpn expects befor...

CVE-2026-80738

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type ARGPTRTOBTFIDSOCKCOMMON. However, they access sk-skprotocol without validating...

CVE-2026-80738 bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type ARGPTRTOBTFIDSOCKCOMMON. However, they access sk-skprotocol without validating...

EUVD-2026-70342

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type ARGPTRTOBTFIDSOCKCOMMON. However, they access sk-skprotocol without validating...

CVE-2026-80738

CVE-2026-80738 affects the Linux kernel BPF subsystem. The functions bpf_tcp_gen_syncookie and bpf_tcp_check_syncookie accept a socket pointer typed as ARG_PTR_TO_BTF_ID_SOCK_COMMON but access sk->sk_protocol without verifying the socket is a full socket rather than a mini-socket. The fix chec...

CVE-2026-80738 bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skstate before skprotocol in bpftcpsyncookie bpftcpgensyncookie and bpftcpchecksyncookie accept a socket pointer 'sk' with argument type ARGPTRTOBTFIDSOCKCOMMON. However, they access sk-skprotocol without validating...

EUVD-2026-70339

In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref skuserdata Some subsystems, like BPF SOCKMAP, set skuserdata without actually setting the encaptype. For this reason, we must make sure that the type is the one ovpn expects befor...

CVE-2026-80735 ovpn: ensure socket is owned by ovpn before deref sk_user_data

In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref skuserdata Some subsystems, like BPF SOCKMAP, set skuserdata without actually setting the encaptype. For this reason, we must make sure that the type is the one ovpn expects befor...

CVE-2026-80735

CVE-2026-80735 affects the ovpn (OpenVPN) module in the Linux kernel . The root cause is a missing type-check: subsystems such as BPF SOCKMAP can set sk_user_data without setting the expected encap_type, and the ovpn driver dereferences sk_user_data without verifying the socket is actually owned ...

CVE-2026-80735 ovpn: ensure socket is owned by ovpn before deref sk_user_data

In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref skuserdata Some subsystems, like BPF SOCKMAP, set skuserdata without actually setting the encaptype. For this reason, we must make sure that the type is the one ovpn expects befor...

PT-2026-84936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The bpf tcp gen syncookie and bpf tcp check syncookie functions accept a socket pointer sk with the argument type ARG PTR TO BTF ID SOCK COMMON. The issue occurs because these functions...

PT-2026-84933

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ovpn component where the system fails to verify if a socket is owned by ovpn before dereferencing sk user data. Certain subsystems, such as BPF SOCKMAP, may set sk...

CVE-2026-80735: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref skuserdata Some subsystems, like BPF SOCKMAP, set skuserdata without actually setting the encaptype. For this reason, we must make sure that the type is the one ovpn expects befor...

The vulnerability of the insn_array_map_direct_value_addr() function in the kernel/bpf/bpf_insn_array.c module, which is part of the BPF interpreter support for the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the insnarraymapdirectvalueaddr function in the kernel/bpf/bpfinsnarray.c module, which is part of the BPF interpreter for Linux kernel, involves a pointer overflow that causes the pointer to go beyond the allocated memory range. Exploiting this vulnerability could allow an...

The vulnerability of the btf_func_proto_check() function in the kernel/bpf/btf.c module, which supports the BPF interpreter of the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the btffuncprotocheck function in the kernel/bpf/btf.c module, which is part of the Linux kernel’s BPF support, relates to incorrect checking of the specified data type for input parameters. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the `cgroup_storage_get_next_key()` function in the kernel/bpf/local_storage.c module, which is part of the Linux operating system’s BPF interpreter support, allows a malicious actor to cause a service failure.

The vulnerability of the cgroupstoragegetnextkey function in the kernel/bpf/localstorage.c module, which is part of the Linux operating system’s BPF interpreter support, relates to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...