Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-80904

net/tls: Fail tls_sw_splice_read() after a failed async decrypt

No CVSS scoreEPSS 0.0016 · 5th percentile

Published by the CVE Program (CNA: Linux) at 4 Sept 2026, 17:19 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected f314bfee81b1bf8e01168177b2f65f24eb8da63a to before a808aadff634c7a408b2ab84d5919e9a741fdb5b git
  • affected f314bfee81b1bf8e01168177b2f65f24eb8da63a to before 06c2a53604fa1dc4820063828d7dadb3675b7af8 git
  • affected f314bfee81b1bf8e01168177b2f65f24eb8da63a to before 18ae1e95f20867106a28820c208a9cec99dda861 git
  • affected f314bfee81b1bf8e01168177b2f65f24eb8da63a to before 82d9269f01ebfd835b6256aa17016a974cbbc647 git
  • affected f314bfee81b1bf8e01168177b2f65f24eb8da63a to before 4b177911eb9f799e9841c2f87c75b08cb112757a git
  • affected f314bfee81b1bf8e01168177b2f65f24eb8da63a to before 976df67f463db1fddaf2a32fb04f57ad2891a23d git
Other versions: unaffected
Linux Linux
  • affected 5.19
  • unaffected before 5.19 semver
  • unaffected 6.1.184 to 6.1.*, inclusive semver
  • unaffected 6.6.153 to 6.6.*, inclusive semver
  • unaffected 6.12.105 to 6.12.*, inclusive semver
  • unaffected 6.18.46 to 6.18.*, inclusive semver
  • unaffected 7.1.10 to 7.1.*, inclusive semver
  • unaffected 7.2 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-80904
CNA
Linux
Tags
Published
4 Sept 2026
Updated
6 Nov 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0016, the 5th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

  1. 4 Sept 2026, 17:19 UTC Confirmed by the CVE List
  2. 4 Sept 2026, 18:17 UTC Confirmed by NVD

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.