CVE-2026-80668: Linux 7.0

Affected technology

Linux · bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5 to before 7ec786f4230c2a9b2eaf97a2d45368933b49d2b2, bffcaad9afdfe45d7fc777397d3b83c1e3ebffe5 to before b8b09dc2bf35a00d4e0556b5d6308c7b917ebda2, 9e1196d27ef496f404c76f7a9d03761142d991c4, 5e1c1d22268ae710c238342c8030c21daf298168, d52fa1fa7440676b8c238037a050ab008c22737f, f338ced0473849c9f6ed0b77ca99f1aab5826787, 497f99b26fffdc5635706d1b4811f1ed8ee21a5b, 6.1.176 to before 6.2, 6.6.143 to before 6.7, 6.12.94 to before 6.13, 6.18.24 to before 6.19, 6.19.14 to before 6.20
Linux

Linux · 7.0
Linux

Component: Not specified by the source
File: include/net/netfilter/nf_conntrack_expect.h, include/uapi/linux/netfilter/nf_conntrack_common.h, net/netfilter/nf_conntrack_core.c, net/netfilter/nf_conntrack_expect.c, net/netfilter/nf_conntrack_h323_main.c, net/netfilter/nf_conntrack_helper.c, net/netfilter/nf_conntrack_netlink.c, net/netfilter/nf_conntrack_sip.c, net/netfilter/nft_ct.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.