4.8

CVE-2026-80996: net: l2tp: do not propagate multicast notification errors

Received
AliasesUBUNTU-CVE-2026-80996DEBIAN-CVE-2026-80996
Published 11-09-2026Last modified 21-10-2026

Vulnerability summary

CVE-2026-80996 is a medium (CVSS 4.8) vulnerability in linux. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.7% of scored vulnerabilities.

Overall risk
19/100
0100
Low · default modelHow is this calculated?
CVSS score
4.8/10
010
Medium · v4.0 (OSV · Ubuntu), selected by version preference
EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:11805-1

Timeline

  1. 11-09-2026
    PublishedVulnerability first disclosed.
  2. 21-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: l2tp: do not propagate multicast notification errors The tunnel create, tunnel modify, session create, and session modify netlink handlers send multicast notifications through helpers that can fail while allocating or encoding a message, or while multicasting it. For tunnel and session create/modify, a notification is sent after the live operation has completed. Returning a best-effort notification error as the command result can therefore report failure for an operation that already committed and can cause callers to retry and accumulate live objects. Keep sending notifications for listener visibility, but do not propagate their best-effort status as the command result. This also keeps the tunnel modify command consistent with the other notification-only paths.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.17% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu169 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linuxAll versions (No fix recorded) | < 6.12.111-1 | < 7.2.6-1
  • linux-6.12< 6.12.111-1~deb12u1
Linux1 product
  • linux≥ 33f72e6f0c67f673fd0c63a8182dbd9ffb8cf50b, < 7efe1c31e0903a5aa796feb96d3adab574b7ff41 | ≥ 33f72e6f0c67f673fd0c63a8182dbd9ffb8cf50b, < 0fe037d5eaad938aa3e9143ee071aa237750b42b | ≥ 33f72e6f0c67f673fd0c63a8182dbd9ffb8cf50b, < 9c340473f4822bb31b151c19afd17448eda5acd1 | ≥ 33f72e6f0c67f673fd0c63a8182dbd9ffb8cf50b, < 50c4038f1670bf9a80c6a58ae83d1602decd8481 | ≥ 33f72e6f0c67f673fd0c63a8182dbd9ffb8cf50b, < af20e269f7459d2ce69887fdf2fad7caf986c865 | 4.0

3 vendors · 172 products

References

9 links