CVE-2026-80852

CVE-2026-80852 is an out-of-bounds write in the Linux kernel's TLS device offload path (net/tls/tls_device.c). The root cause is that tls_push_data() skips its fragment-count check on an early MSG_MORE break, allowing num_frags to exceed MAX_SKB_FRAGS (17) when splice(SPLICE_F_MORE) calls are iss...

EUVD-2026-71302

In the Linux kernel, the following vulnerability has been resolved: tls: device: fix out-of-bounds write in tlsappendfrag Found with syzkaller and a local syzbot instance running on top of a netdevsim TLS offload emulation; tlsdevice.c is otherwise only reachable on a machine with a NIC that...