CVE-2026-64522

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA mlx5exfrmaddstate handles acquire-flow temporary SAs by allocating software state and skipping hardware offload setup. That path jumps to the common success label...

CVE-2025-39770

CVE-2025-39770 affects the Linux kernel net/ GSO for IPv6 with extension headers. The issue arises when GSO on an IPv6 packet with extension headers prompts checksum offload on devices that only advertise NETIF_F_IPV6_CSUM, which is meant to support offload only for plain TCP/UDP over IPv6 and no...