EUVD-2026-80940Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Network-reachable with no authentication required; only availability impacted via deadlock; no scope change beyond the kernel networking stack.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
3DescriptionCVE.org
[defrag: fragmented encapsulated traffic with fragments can lead to deadlock]
AnalysisAI
Deadlock in the Linux kernel IP defragmentation subsystem occurs when processing fragmented encapsulated (tunneled) traffic, allowing a remote attacker to trigger a kernel locking deadlock by sending specially crafted fragmented tunnel packets. Any Linux system with active tunnel interfaces (GRE, IPIP, VXLAN, or similar encapsulation) and IP defragmentation enabled is potentially affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target Linux system has at least one active tunnel interface (GRE, IPIP, VXLAN, SIT, or similar encapsulation type) AND that IP defragmentation is enabled (the default for systems running conntrack/netfilter). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | With no CVSS vector, no EPSS score, no KEV listing, and no POC, risk quantification is limited to structural inference from the vulnerability description. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the kernel update issued by Ubuntu as reported by the vendor. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-833 – Deadlock
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today