THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-80634 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag The DEV_PATH_BR_VLAN_UNTAG case post-decrements info->num_encaps inside WARN_ON_ONCE(). num_encaps is u8, so if it's already 0 the decrement

[NVD] CVE-2026-80634 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag The DEV_PATH_BR_VLAN_UNTAG case post-decrements info->num_encaps inside WARN_ON_ONCE(). num_encaps is u8, so if it's already 0 the decrement

mednvdPublished 2026-08-28

CVE-2026-80634 CVSS: 9.8 CRITICAL Published: 2026-08-28T08:16:48.303

In the Linux kernel, the following vulnerability has been resolved:

netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag

The DEV_PATH_BR_VLAN_UNTAG case post-decrements info->num_encaps inside WARN_ON_ONCE(). num_encaps is u8, so if it's already 0 the decrement still happens and wraps it to 255. The break only

Indicators of compromise

CVE-2026-80634cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80634