CVE-2026-80615

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A false-positive memcpy overflow occurs in the tun dst unclone function within the dst metadata component. When built with clang and source fortification, the compiler incorrectly estimates that tunnel options cannot fit into the structure during initialization, triggering a buffer overflow warning. This happens because kmalloc flex() in metadata dst alloc() sets counted by to options len, which is subsequently initialized to zero before the actual copy operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.