CVE-2026-68121

In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE header before calling dev_hard_header(). Device header callbacks are allowed to reallocate the skb head, invalidating pointers into it. This can happen when a send is blocked in copy_from_user() while the first non-Ethernet port is added to an empty team device. The team's delegated GRE header callback then expands the skb head. PPPoE subsequently writes six bytes through the stale pointer into the freed head. Reload the PPPoE header through the skb's network-header offset after device header creation. pskb_expand_head() updates that offset when it relocates the head.

• https://git.kernel.org/stable/c/6866abf59976d273164a6624234d96a967280223
• https://git.kernel.org/stable/c/7e9fbd7f96bcde63a7c798fe16b38cedee7a1501
• https://git.kernel.org/stable/c/bed4caecd723693f750e13adbb2c42ca1249a3fd
• https://git.kernel.org/stable/c/e6493a4d1ee17595766165fa446d45b7e0c318d0
• https://git.kernel.org/stable/c/e9c238f6fe42fb1b4dba3a578277de32cb487937

Published

Aug 10, 2026

Last Modified

Aug 10, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-68116In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68117In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68118In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68119In the Linux kernel, the following vulnerability has been re…
• CVE-2026-6812The Ona theme for WordPress is vulnerable to Server-Side Req…4.4
• CVE-2026-68120In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68122In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68123In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68124In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68125In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68126In the Linux kernel, the following vulnerability has been re…
• CVE-2026-68127In the Linux kernel, the following vulnerability has been re…