VLAN Offload Vulnerability in Linux Kernel

CVE-2026-80925

What is CVE-2026-80925?

The Linux kernel has been identified with a vulnerability related to hardware VLAN TX offload. When toggling VLAN offload features, a data race occurs due to the dynamic changes in the device's hard_header_len without proper synchronization, leading to insufficient headroom for packet transmission. This can result in skb_under_panic errors when creating VLAN headers. The vulnerability is mitigated by ensuring that the hard_header_len remains static, thereby allowing the allocation of sufficient headroom and conforming to necessary offsets for correct packet handling.

References