PT-2026-82913 · Linux · Linux Kernel
CVE-2026-80613
·
Published
2026-08-28
·
Updated
2026-08-29
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the veth driver during XDP enablement. If the functions
xdp rxq info reg() or xdp rxq info reg mem model() fail, the driver attempts to roll back changes. However, the rollback loop incorrectly decrements the loop index i before the first iteration, which causes the driver to skip calling netif napi deli() for rq[i].xdp napi. Because netif napi add() had already been executed for that index, a dangling napi struct remains in the device's napi list. When the veth device is destroyed, the freed queue memory containing the leaked NAPI structure may be reused, and the subsequent device teardown can corrupt this reallocated memory, resulting in a Use-After-Free (UAF) condition. Use-After-Free is a scenario where a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel