THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-80603 (CRITICAL 9.1) — In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read parse_dcc() treats data_end as an inclusive end pointer, but its only caller passes data_limit = ib_ptr + datalen, which points one past the last

[NVD] CVE-2026-80603 (CRITICAL 9.1) — In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read parse_dcc() treats data_end as an inclusive end pointer, but its only caller passes data_limit = ib_ptr + datalen, which points one past the last

mednvdPublished 2026-08-28

CVE-2026-80603 CVSS: 9.1 CRITICAL Published: 2026-08-28T08:16:44.187

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read

parse_dcc() treats data_end as an inclusive end pointer, but its only caller passes data_limit = ib_ptr + datalen, which points one past the last valid byte.

The newline search loop iterates whi

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80603