CVE-2026-80779
Description
In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated with q->index equal to lif->ionic->nrxqs_per_lif. The normal txqcqs array only contains the regular queue pairs, so using that index to set rxq->partner can read one entry past txqcqs[] and then write through the derived pointer. Only link RX/TX partners for normal queue-pair indexes. Leave the hwstamp RX queue unpaired, and make the XDP_TX path abort cleanly if an RX queue has no TX partner.
How to fix
- Linux Linux881a805a8029ba48c0ce81c6674910f8d83f7afb, 39fc615e355b65b8d43be30da57aa95ae6eaf688, f3868046e8e2e761d4d943a232bd109ff22a7d5b, ea081b4435515ac7177eb598a3c0678d1b9e7911, d92255b405fb6f5acca408239ccd742e0a42c9cb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8eeed8373e1cca836799bf8e4a05cffa8e444908 ≤ v < 881a805a8029ba48c0ce81c6674910f8d83f7afb, 8eeed8373e1cca836799bf8e4a05cffa8e444908 ≤ v < 39fc615e355b65b8d43be30da57aa95ae6eaf688, 8eeed8373e1cca836799bf8e4a05cffa8e444908 ≤ v < f3868046e8e2e761d4d943a232bd109ff22a7d5b, 8eeed8373e1cca836799bf8e4a05cffa8e444908 ≤ v < ea081b4435515ac7177eb598a3c0678d1b9e7911, 8eeed8373e1cca836799bf8e4a05cffa8e444908 ≤ v < d92255b405fb6f5acca408239ccd742e0a42c9cb, 6.9 | 881a805a8029ba48c0ce81c6674910f8d83f7afb, 39fc615e355b65b8d43be30da57aa95ae6eaf688, f3868046e8e2e761d4d943a232bd109ff22a7d5b, ea081b4435515ac7177eb598a3c0678d1b9e7911, d92255b405fb6f5acca408239ccd742e0a42c9cb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.