News › security
By Zayden R., August 29, 2026
Greg Kroah-Hartman has released eight stable kernels addressing CVE-2026-80590, a vulnerability allowing unprivileged user-induced kernel panics. Engineers should upgrade to protect systems.
In a significant update, Greg Kroah-Hartman has announced the release of eight stable Linux kernels designed to patch a critical vulnerability identified as CVE-2026-80590. This flaw, which has been lurking since Linux version 2.6.27, allows IPv4 or IPv6 fragments to be marked as Generic Segmentation Offload (GSO). The consequence? An unprivileged user could potentially trigger a kernel panic, a scenario no system administrator wants to face.
The newly released kernels include versions 7.2.2, 7.1.12, 6.18.48, 6.12.107, 6.6.155, 6.1.186, 5.15.219, and 5.10.268. Each of these updates contains a single but crucial fix aimed at neutralizing this vulnerability. For engineers and sysadmins, the message is clear: upgrading is imperative to ensure the stability and security of their Linux systems.
Understanding the technical nuances, the vulnerability stems from the ability to manipulate network packet fragments. By marking these fragments as GSO, a user without elevated privileges could induce a state that the kernel is unprepared to handle, leading to a crash. Given the ubiquity of Linux in various environments, the potential impact of this flaw could be widespread if left unpatched.
For those managing Linux environments, the practical steps are straightforward. Verify the current kernel version running on your systems and plan an upgrade to the latest release that aligns with your distribution. This proactive step will safeguard against the described exploit and maintain the operational integrity of your infrastructure.
While it's always a challenge to keep up with kernel updates, this release underscores the importance of staying vigilant. Security vulnerabilities like CVE-2026-80590 remind us of the ever-present need to maintain robust defenses in our systems. This update is a solid improvement, addressing a vulnerability that could have far-reaching consequences if exploited.
The Linux Camp teaches these topics as hands-on labs on real virtual machines, verified as you type.