CVE-2026-80669

BPF LSM programs can currently attach to xfrm_decode_session(). That hook may return an error, but security_skb_classify_flow() calls it from a void path and triggers BUG_ON() if an error is returned.

Disable BPF attachment to the hook to prevent a BPF LSM program from turning packet classification into a full panic.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80669.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

9e4e01dfd3254c7f04f24b7c6b29596bc12332f3

Fixed

aa265d47308775c5501073b08133623bcb5421f9

Fixed

6b44c6660aa1c9b843e450a623ac4a8484919dce

Fixed

4ae780d173ef40d4f7cb76935dc2d55fbf380009

Fixed

49fa1be621dde8f526d36e5791aded8fafda1e9c

Fixed

1bb3b6a5c3c5cc814eae4ff0212fdced36f8bce9

Fixed

12091470c6b4c1c14b2de12dcbae2ada6cb6d20b

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80669.json"

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.7.0

Fixed

6.1.178

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.145

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.97

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.18.40

Type: ECOSYSTEM
Events: Introduced

6.19.0

Fixed

7.1.5

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80669.json"