Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2026-80669 Details

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_session hook attachment BPF LSM programs can currently attach to xfrm_decode_session(). That hook may return an error, but security_skb_classify_flow() calls it from a void path and triggers BUG_ON() if an error is returned. Disable BPF attachment to the hook to prevent a BPF LSM program from turning packet classification into a full panic.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/12091470c6b4c1c14b2de12dcbae2ada6cb6d20b	kernel.org
https://git.kernel.org/stable/c/1bb3b6a5c3c5cc814eae4ff0212fdced36f8bce9	kernel.org
https://git.kernel.org/stable/c/49fa1be621dde8f526d36e5791aded8fafda1e9c	kernel.org
https://git.kernel.org/stable/c/4ae780d173ef40d4f7cb76935dc2d55fbf380009	kernel.org
https://git.kernel.org/stable/c/6b44c6660aa1c9b843e450a623ac4a8484919dce	kernel.org
https://git.kernel.org/stable/c/aa265d47308775c5501073b08133623bcb5421f9	kernel.org

see all 6 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

1 change record found show changes