CVE-2026-80738 | Linux Kernel up to 7.1.8 BPF bpf_tcp_gen_syncookie/bpf_tcp_check_syncookie sk null pointer dereference

September 3, 2026 Yanac

A vulnerability was found in Linux Kernel up to 7.1.8 and classified as problematic. Affected by this vulnerability is the function bpf_tcp_gen_syncookie/bpf_tcp_check_syncookie of the component BPF. Executing a manipulation of the argument sk can lead to null pointer dereference.

This vulnerability is tracked as CVE-2026-80738. The attack is restricted to local execution. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More