Out-of-Bounds Write Vulnerability in TLS Offload for Linux Kernel by Vendor Linux

CVE-2026-80852

What is CVE-2026-80852?

A vulnerability in the Linux kernel's TLS offload implementation could allow for out-of-bounds writes, potentially leading to system instability or compromised memory integrity. This issue arises during the handling of TLS messages, particularly when insufficient checks on fragment counts enable writes beyond allocated boundaries. Such faults can be triggered through specific system calls, risking both data corruption and unauthorized access privileges. Users are advised to update their kernel to the latest version to mitigate any potential attacks exploiting this vulnerability.

References