TCP State Lookup Vulnerability in Linux Kernel

CVE-2026-80875

What is CVE-2026-80875?

A vulnerability in the Linux kernel's TCP state handling may lead to incorrect interpretation of network packets containing IPv6 extension headers. The issue arises as the kernel struggles to accurately retrieve the TCP header due to a mishandling of transport offsets during state lookup. When an IPv6 packet with extension headers is processed, it can result in the kernel examining incorrect bytes, potentially impacting the flow of network traffic. Proper parsing of transport offsets is crucial for maintaining the integrity of TCP state management.

References