CVE-2026-80669

In the Linux kernel, the following vulnerability has been resolved:

bpf: Disable xfrmdecodesession hook attachment

BPF LSM programs can currently attach to xfrmdecodesession(). That hook may return an error, but securityskbclassifyflow() calls it from a void path and triggers BUGON() if an error is returned.

Disable BPF attachment to the hook to prevent a BPF LSM program from turning packet classification into a full panic.