CVE-2026-80925

CVE-2026-80925 affects the Linux kernel VLAN subsystem. Toggling hardware VLAN TX offload (NETIF_F_HW_VLAN_CTAG_TX or NETIF_F_HW_VLAN_STAG_TX) on a lower device invokes vlan_transfer_features(), which dynamically mutates vlandev->hard_header_len. Lockless TX paths (e.g., packet_snd, ip6_finish...