PT-2026-82913 · Linux · Linux Kernel

CVE-2026-80613

·

Published

2026-08-28

·

Updated

2026-08-29

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the veth driver during XDP enablement. If the functions xdp rxq info reg() or xdp rxq info reg mem model() fail, the driver attempts to roll back changes. However, the rollback loop incorrectly decrements the loop index i before the first iteration, which causes the driver to skip calling netif napi deli() for rq[i].xdp napi. Because netif napi add() had already been executed for that index, a dangling napi struct remains in the device's napi list. When the veth device is destroyed, the freed queue memory containing the leaked NAPI structure may be reused, and the subsequent device teardown can corrupt this reallocated memory, resulting in a Use-After-Free (UAF) condition. Use-After-Free is a scenario where a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-80613

Affected Products

Linux Kernel