CVE-2026-80994: Linux 3.16

Affected technology

Linux · 56c19868e115fcf8d62d843e1b9616bb9837d0db to before ea5f7b45b582665541ddfb77dce98611354af4ab, 56c19868e115fcf8d62d843e1b9616bb9837d0db to before 18ce1a8b7499c016d4a893d9b1db80608f73745d, 56c19868e115fcf8d62d843e1b9616bb9837d0db to before c15ef9a5bf594f93a31de2ec2ec394e2a903519a, 56c19868e115fcf8d62d843e1b9616bb9837d0db to before 64051fe200c7c759af71634bd2123552eaabb69a, 56c19868e115fcf8d62d843e1b9616bb9837d0db to before 0ba5cbc2f049af94ec94ff6f64958545efc5eaa2, 56c19868e115fcf8d62d843e1b9616bb9837d0db to before ac73e3af571da06c1d1cfe3f0f00dc978b851700, 56c19868e115fcf8d62d843e1b9616bb9837d0db to before 7f072b84afd05a77963eb1872f7174e280661dce, 56c19868e115fcf8d62d843e1b9616bb9837d0db to before 4e30317ff67a2eb12b4d890d39f72fd7e7117d48
Linux

Linux · 3.16
Linux

Component: Not specified by the source
File: net/openvswitch/datapath.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

A local attacker with low privileges could trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.