CVE-2026-80669
Published Aug 28, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_session hook attachment BPF LSM programs can currently attach to xfrm_decode_session(). That hook may return an error, but security_skb_classify_flow() calls it from a void path and triggers BUG_ON() if an error is returned. Disable BPF attachment to the hook to prevent a BPF LSM program from turning packet classification into a full panic.
Is your site exposed to CVE-2026-80669?
Run a free security scan — no signup, results in seconds.
EPSS — Exploit Prediction
0.0017
Probability of exploitation
0.07%
Percentile rank
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
References
Other References
https://git.kernel.org/stable/c/12091470c6b4c1c14b2de12dcbae2ada6cb6d20b
https://git.kernel.org/stable/c/1bb3b6a5c3c5cc814eae4ff0212fdced36f8bce9
https://git.kernel.org/stable/c/49fa1be621dde8f526d36e5791aded8fafda1e9c
https://git.kernel.org/stable/c/4ae780d173ef40d4f7cb76935dc2d55fbf380009
https://git.kernel.org/stable/c/6b44c6660aa1c9b843e450a623ac4a8484919dce
https://git.kernel.org/stable/c/aa265d47308775c5501073b08133623bcb5421f9
Frequently Asked Questions
What is CVE-2026-80669? +
In the Linux kernel, the following vulnerability has been resolved:
bpf: Disable xfrm_decode_session hook attachment
BPF LSM programs can currently attach to xfrm_decode_session(). That
hook may return an error, but security_skb_classify_flow() calls it
from a void path and triggers BUG_ON() if an error is returned.
Disable BPF attachment to the hook to prevent a BPF LSM program from
turning packet classification into a full panic.
How do I check if I'm vulnerable to CVE-2026-80669? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.