# net: packet: fix wrong transport_header when sending VLAN-tagged frame

CVE record · `CVE-2026-80906`

- **Identifiers:** `CVE-2026-80906`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 4 Sept 2026
- **Updated:** 6 Nov 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 4 Sept 2026, 17:19 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `c2137d565ceb505de69593c181a0543bc4083838 to before a4b82de96d465ddb44bc931145c0fa80c4fe9c9c` (git)
  - affected: `9ff46c36df2e0a1ac352f2f4038eaf3f0f7361b8 to before fa86bc52ea8ba981f74f851fd61e2a3d3bc0feac` (git)
  - affected: `dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before 5479eb9b355f44745d7ccfe112386bd4f96eceea` (git)
  - affected: `dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before e451e20adb869a983a21dda158625f024142e61f` (git)
  - affected: `dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before 6971cf319263d6a1b4096f9248aca9e57d77a1eb` (git)
  - affected: `dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before f9297abbcaba760b7a7b9d63b839f607f738013e` (git)
  - affected: `dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before 6386a6ffa2efba2965ed8e4fa303582c0b76a215` (git)
  - affected: `dfed913e8b55a0c2c4906f1242fd38fd9a116e49 to before 01fdecc0480d916c799dbee584833a4a37e94d06` (git)
  - affected: `ad3f90a9c4a2c74bb3711f2031bffda4ec44c849` (git)
  - affected: `5.10.163 to before 5.10.266` (semver)
  - affected: `5.15.87 to before 5.15.217` (semver)
  - affected: `5.4.229 to before 5.5` (semver)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.19`
  - unaffected: `before 5.19` (semver)
  - unaffected: `5.10.266 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.217 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.184 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.153 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.105 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.46 to 6.18.*, inclusive` (semver)
  - unaffected: `7.1.10 to 7.1.*, inclusive` (semver)
  - unaffected: `7.2 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0016, the 5th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

- 4 Sept 2026, 17:19 UTC: [Confirmed by the CVE List](https://www.cve.org/CVERecord?id=CVE-2026-80906)
- 4 Sept 2026, 18:18 UTC: [Confirmed by NVD](https://nvd.nist.gov/vuln/detail/CVE-2026-80906)

## Sources

- [CVE List: CVE-2026-80906](https://www.cve.org/CVERecord?id=CVE-2026-80906)
- [NVD: CVE-2026-80906](https://nvd.nist.gov/vuln/detail/CVE-2026-80906)

### References from the CNA

- <https://git.kernel.org/stable/c/a4b82de96d465ddb44bc931145c0fa80c4fe9c9c>
- <https://git.kernel.org/stable/c/fa86bc52ea8ba981f74f851fd61e2a3d3bc0feac>
- <https://git.kernel.org/stable/c/5479eb9b355f44745d7ccfe112386bd4f96eceea>
- <https://git.kernel.org/stable/c/e451e20adb869a983a21dda158625f024142e61f>
- <https://git.kernel.org/stable/c/6971cf319263d6a1b4096f9248aca9e57d77a1eb>
- <https://git.kernel.org/stable/c/f9297abbcaba760b7a7b9d63b839f607f738013e>
- <https://git.kernel.org/stable/c/6386a6ffa2efba2965ed8e4fa303582c0b76a215>
- <https://git.kernel.org/stable/c/01fdecc0480d916c799dbee584833a4a37e94d06>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-80906>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-80906/>. Everything for agents: <https://agentprime.io/llms.txt>.