CVE-2026-80603

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An off-by-one out-of-bounds read exists in the parse dcc() function within the nf conntrack irc module of the netfilter subsystem. The function treats the data end pointer as inclusive, while the caller provides a data limit that points one byte past the last valid byte. When no newline is present, the search loop reads one byte beyond the region filled by skb header pointer(). This can lead to the consumption of uninitialized or stale data by simple strtoul(), resulting in incorrect DCC IP or port values in the conntrack expectation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.