CVE-2026-80637

HIGH
MEDIUM Priority: 0.05 BB Relevance: 75/100
Published: 2026-08-28 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use get_unaligned_be32() and put_unaligned_be32() to safely read and write the timestamp fields. This prevents performance degradation due to unaligned memory access or even a crash on strict alignment architectures. This follows the implementation of timestamp parsing in the networking stack at tcp_parse_options() and synproxy_parse_options().

Affected Software (7)

VendorProductVersion
Linux Linux 48b1de4c110a7afa4b85862f6c75af817db26fad < b30a2d56ee47282f6a46cb2f50e315b2414851fe
Linux Linux 48b1de4c110a7afa4b85862f6c75af817db26fad < 95cda0446f51077c343fdd8264be2737eb25a6c3
Linux Linux 48b1de4c110a7afa4b85862f6c75af817db26fad < 2b8e7aaa38002d8ee2f48d87b1f392eadd8e98c4
Linux Linux 48b1de4c110a7afa4b85862f6c75af817db26fad < 5c9c67cf7a3d16051dfb90e98836f530964dfb8e
Linux Linux 48b1de4c110a7afa4b85862f6c75af817db26fad < ea3d2caa5bfacf5db5c1cad521ca5d9144edd9a7
Linux Linux 48b1de4c110a7afa4b85862f6c75af817db26fad < 992c20bc8a4aba220c8b95b467d049289778dad6
Linux Linux 3.12

Bug Bounty Relevance

75 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.68%
Raw Score 0.006840
Percentile 52.6%
Date 2026-10-31

EPSS Trend

2026-10-31
0.00684
2026-10-30
0.00630
2026-10-29
0.00630

Intelligence Sources

mitre ref →
nvd ref →