CVE-2026-80905

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the tap get user xdp() function when processing VLAN-tagged frames. The skb set network header() function is called prematurely, advancing the network header past the VLAN tag before skb probe transport header() is executed. Consequently, in skb flow dissect(), the system misinterprets the inner protocol header as a VLAN header, resulting in an invalid encapsulated EtherType. This prevents skb set transport header() from being called, leaving the transport header at an uninitialized sentinel value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.