CVEvulnerability
CVE-2026-80637
7.5 HIGH
Official page ↗
- Status
- Received
- Published
- 2026-08-28
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: synproxy: fix unaligned memory access in timestamp adjustment
Use get_unaligned_be32() and put_unaligned_be32() to safely read and
write the timestamp fields. This prevents performance degradation due to
unaligned memory access or even a crash on strict alignment
architectures.
This follows the implementation of timestamp parsing in the networking
stack at tcp_parse_options() and synproxy_parse_options().
References
- https://git.kernel.org/stable/c/2b8e7aaa38002d8ee2f48d87b1f392eadd8e98c4 git.kernel.org
- https://git.kernel.org/stable/c/5c9c67cf7a3d16051dfb90e98836f530964dfb8e git.kernel.org
- https://git.kernel.org/stable/c/95cda0446f51077c343fdd8264be2737eb25a6c3 git.kernel.org
- https://git.kernel.org/stable/c/992c20bc8a4aba220c8b95b467d049289778dad6 git.kernel.org
- https://git.kernel.org/stable/c/ea3d2caa5bfacf5db5c1cad521ca5d9144edd9a7 git.kernel.org