THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-80590 (HIGH 8.6) — In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtio_net_hdr (tun/tap, or AF_PACKET with PACKET_VNET_HDR) can mark an IPv4 or IPv6 fragment as GSO; nothing relates gso_type to frag_off. inet_f

[NVD] CVE-2026-80590 (HIGH 8.6) — In the Linux kernel, the following vulnerability has been resolved: inet: frags: strip GSO state from fragments before reassembly A virtio_net_hdr (tun/tap, or AF_PACKET with PACKET_VNET_HDR) can mark an IPv4 or IPv6 fragment as GSO; nothing relates gso_type to frag_off. inet_f

mednvdPublished 2026-08-28

CVE-2026-80590 CVSS: 8.6 HIGH Published: 2026-08-28T08:16:42.517

In the Linux kernel, the following vulnerability has been resolved:

inet: frags: strip GSO state from fragments before reassembly

A virtio_net_hdr (tun/tap, or AF_PACKET with PACKET_VNET_HDR) can mark an IPv4 or IPv6 fragment as GSO; nothing relates gso_type to frag_off. inet_frag_reasm_prepare()/inet_frag_reasm_finish() keep the

Indicators of compromise

CVE-2026-80590cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80590