THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-80976 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decap_and_validate() pulls the outer SRv6 headers and makes the inner packet the skb network header. The IPv6 control block still contains values collected while parsi

[NVD] CVE-2026-80976 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decap_and_validate() pulls the outer SRv6 headers and makes the inner packet the skb network header. The IPv6 control block still contains values collected while parsi

mednvdPublished 2026-09-11

CVE-2026-80976 CVSS: 9.8 CRITICAL Published: 2026-09-11T20:19:03.887

In the Linux kernel, the following vulnerability has been resolved:

seg6: reset IP6CB after IPv6 decapsulation

decap_and_validate() pulls the outer SRv6 headers and makes the inner packet the skb network header. The IPv6 control block still contains values collected while parsing the outer packet, including nhoff and extension

Indicators of compromise

CVE-2026-80976cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-80976