vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-64410

netfilter: flowtable: IPIP tunnel hardware offload is not yet support

CRITICAL
9.8
CVSS Score
Published: July 25, 2026 at 08:50 AM UTC
Updated: September 4, 2026 at 03:46 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
CRITICAL9.8
Exploit prediction
EPSS 0.6%

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: IPIP tunnel hardware offload is not yet support No driver supports for IPIP tunnels yet, give up early on setting up the hardware offload for this scenario. This patch adds a stub that can be enhanced to add more configuration that are currently not supported. As of now, the offload work is enqueued to the worker, then ignored if the hardware offload configuration is not supported. Check the NF_FLOW_HW flag to know if this entry was already tried once to be offloaded so this is not retried on refresh when unsupported. Move NF_FLOW_HW flag check to nf_flow_offload_add(). If this NF_FLOW_HW flag is unset the _del and _stats variants are never called. This can be updated later on to skip hardware offload work to be queued in case hardware offload does not support it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.19 ≤ v < 7.1.46.19 ≤ v < 7.27.2 rc17.2 rc2ab427db17885814069bae891834f20842f0ac3a4
Vendor states this is fixed in 6c5dcab95f4cd42a1648739ec9300fbb4b1a021f (fixed)
Vendor states this is fixed in 9efe838c13133acb70c78d04c49e8362fe533566 (fixed)
Vendor states this is fixed in 6.19 (unaffected)
Vendor states this is fixed in 7.1.4 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

Patch
Source: cverecord
https://git.kernel.org/stable/c/9efe838c13133acb70c78d04c49e8362fe533566
Patch
Source: cverecord
https://git.kernel.org/stable/c/6c5dcab95f4cd42a1648739ec9300fbb4b1a021f

CVSS

9.8CRITICALLinux
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card