kernel: net: tun: bound receive headroom

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

kernel: net: tun: bound receive headroom

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

kernel: net: tun: bound receive headroom

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

RHEL 9 : kernel (RHSA-2026:71631)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71631 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: PPPoE memory...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segmentsleft CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages: kernel Note: Th...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom CVE-2026-81000 Affected Packages: kernel Note: This advisory is applicable to Amazon Linux 2 - Kernel-5.15 Extra. Visit this page to learn more about Amazon Linux 2 AL2 Extras and...

RHEL 10 : kernel (RHSA-2026:71599)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71599 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: PPPoE memory...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: block: zero non-PI portion of auto integrity buffer CVE-2026-23007 kernel: afunix: Drop all SCM attributes for SOCKMAP CVE-2026-53005 kernel: mac802154: llsec: add skbcowdata before...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-131)

The version of kernel installed on the remote host is prior to 5.10.268-266.1094. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-131 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header...

RHEL 9 : kernel (RHSA-2026:71601)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71601 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: crypto: afalg - Disallow...

RHEL 9 : kernel-rt (RHSA-2026:71606)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:71606 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

kernel: net: tun: bound receive headroom

A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...

Important: Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

ALSA-2026:71213 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto CVE-2026-63831 kernel: sctp: don't free the ASCONF's own...

ALSA-2026:71016 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto CVE-2026-63831 kernel: sctp: don't free the ASCONF's own...

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: drm/amdgpu: Fix use-after-free race in VM acquire CVE-2026-43370 kernel: mac802154: llsec: add skbcowdata before in-place crypto...

The vulnerabilities of the functions tun_get_user() and tun_xdp_one() in the drivers/net/tun.c file of the Linux kernel’s TUN/TAP virtual network interface driver allow a attacker to cause a service failure.

The vulnerability of the tungetuser and tunxdpone functions in the drivers/net/tun.c file of the Linux virtual network interface TUN/TAP driver leads to a lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability can allow an attacker to cause...

Exploit for CVE-2026-81000

⚡ CVE-2026-81000 - TUNderflow Linux Kernel TUN/TAP Rece...

The vulnerability of the tun_get_user() function in the Linux kernel’s TUN virtual network driver allows a hacker to gain increased privileges.

The vulnerability of the tungetuser function in the Linux kernel’s TUN network driver is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain increased privileges...