CVE-2026-80978

CVE-2026-80978 affects the Linux kernel IP tunnel networking subsystem. IP tunnel devices derive their advertised needed_headroom from lower output devices; a stack of user-created devices can make this value exceed what 16-bit skb header offsets can represent, causing skb head expansion to wrap ...

CVE-2026-80978 net: cap advertised IP tunnel headroom

In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...