CVE-2026-80731

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write exists in the dev validate header() function. The issue occurs when the function reads dev->hard header len to zero-pad short link layer headers for users with CAP SYS RAWIO privileges. If a device is reconfigured and dev->hard header len increases after the buffer headroom was allocated but before validation, the memset() function writes beyond the reserved buffer. This specifically affects variable length L2 protocols where the length is less than hard header len but greater than or equal to min header len.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.