THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-81000 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request from another port to T

[NVD] CVE-2026-81000 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request from another port to T

mednvdPublished 2026-09-11

CVE-2026-81000 CVSS: 7.8 HIGH Published: 2026-09-11T20:19:07.710

In the Linux kernel, the following vulnerability has been resolved:

net: tun: bound receive headroom

tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear. OVS can propagate an oversized headroom request from another port to TUN or TAP.

When align is larger than the usable space

Indicators of compromise

CVE-2026-81000cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-81000