CVE-2026-80637

netfilter: synproxy: fix unaligned memory access in timestamp adjustment

State: Published
Severity: 7.5 High
Published: Aug 28, 2026
Updated: Oct 30, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: synproxy: fix unaligned memory access in timestamp adjustment

Use get_unaligned_be32() and put_unaligned_be32() to safely read and write the timestamp fields. This prevents performance degradation due to unaligned memory access or even a crash on strict alignment architectures.

This follows the implementation of timestamp parsing in the networking stack at tcp_parse_options() and synproxy_parse_options().

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	48b1de4c110a7afa4b85862f6c75af817db26fad to before b30a2d56ee47282f6a46cb2f50e315b2414851feAffected 48b1de4c110a7afa4b85862f6c75af817db26fad to before 95cda0446f51077c343fdd8264be2737eb25a6c3Affected 48b1de4c110a7afa4b85862f6c75af817db26fad to before 2b8e7aaa38002d8ee2f48d87b1f392eadd8e98c4Affected 48b1de4c110a7afa4b85862f6c75af817db26fad to before 5c9c67cf7a3d16051dfb90e98836f530964dfb8eAffected 48b1de4c110a7afa4b85862f6c75af817db26fad to before ea3d2caa5bfacf5db5c1cad521ca5d9144edd9a7Affected 48b1de4c110a7afa4b85862f6c75af817db26fad to before 992c20bc8a4aba220c8b95b467d049289778dad6Affected
LinuxLinux	3.12Affected before 3.12Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

48b1de4c110a7afa4b85862f6c75af817db26fad to before b30a2d56ee47282f6a46cb2f50e315b2414851feAffected
48b1de4c110a7afa4b85862f6c75af817db26fad to before 95cda0446f51077c343fdd8264be2737eb25a6c3Affected
48b1de4c110a7afa4b85862f6c75af817db26fad to before 2b8e7aaa38002d8ee2f48d87b1f392eadd8e98c4Affected
48b1de4c110a7afa4b85862f6c75af817db26fad to before 5c9c67cf7a3d16051dfb90e98836f530964dfb8eAffected
48b1de4c110a7afa4b85862f6c75af817db26fad to before ea3d2caa5bfacf5db5c1cad521ca5d9144edd9a7Affected
48b1de4c110a7afa4b85862f6c75af817db26fad to before 992c20bc8a4aba220c8b95b467d049289778dad6Affected

LinuxLinux

3.12Affected
before 3.12Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.