CVE-2026-80637

HighCVSS 7.5/10Last modified Oct 21, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: synproxy: fix unaligned memory access in timestamp adjustment

Use get_unaligned_be32() and put_unaligned_be32() to safely read and write the timestamp fields. This prevents performance degradation due to unaligned memory access or even a crash on strict alignment architectures.

This follows the implementation of timestamp parsing in the networking stack at tcp_parse_options() and synproxy_parse_options().

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 48b1de4c110a7afa4b85862f6c75af817db26fad, < 95cda0446f51077c343fdd8264be2737eb25a6c3; >= 48b1de4c110a7afa4b85862f6c75af817db26fad, < 2b8e7aaa38002d8ee2f48d87b1f392eadd8e98c4; >= 48b1de4c110a7afa4b85862f6c75af817db26fad, < 5c9c67cf7a3d16051dfb90e98836f530964dfb8e; >= 48b1de4c110a7afa4b85862f6c75af817db26fad, < ea3d2caa5bfacf5db5c1cad521ca5d9144edd9a7; >= 48b1de4c110a7afa4b85862f6c75af817db26fad, < 992c20bc8a4aba220c8b95b467d049289778dad6
LinuxLinux3.12

References

Timeline

Published
Aug 28, 2026
Last modified
Oct 21, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-806388.8In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent [BUG] UCVE-2026-80639In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix __fortify_panic Fix a runtime assertion in setup_xor_mapCVE-2026-80640In the Linux kernel, the following vulnerability has been resolved: cxl/fwctl: Fix __fortify_panic Fix a runtime assertion in cxlctl_get_sCVE-2026-80641In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version numCVE-2026-80642In the Linux kernel, the following vulnerability has been resolved: liveupdate: Reference count incoming FLB data Increment the incoming FCVE-2026-80643In the Linux kernel, the following vulnerability has been resolved: EDAC/igen6: Fix call trace due to missing release() When unloading theCVE-2026-80644In the Linux kernel, the following vulnerability has been resolved: ocfs2: don't BUG_ON an invalid journal dinode [BUG] A fuzzed OCFS2 imaCVE-2026-806458.1In the Linux kernel, the following vulnerability has been resolved: rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() With a liCVE-2026-806467.5In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6_dev_stats_get() dev_gCVE-2026-80647In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll cq direct mode CQs allocated by ib_allocCVE-2026-80648In the Linux kernel, the following vulnerability has been resolved: pinctrl: spacemit: fix NULL check in spacemit_pin_set_config spacemit_CVE-2026-806497.8In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_g
CVE-2026-80637: High severity, CVSS 7.5 | Vulnix