cve 2024 26882

  1. Linux kernel IPv4 tunnel fix CVE-2024-26882 prevents uninitialized decapsulation

    The Linux kernel received a targeted fix in April 2024 for a subtle packet‑parsing bug in its IPv4 tunnel path — tracked as CVE‑2024‑26882 — that could leave inner packet headers uninitialized during decapsulation, producing KMSAN warnings and, in some configurations, enabling denial‑of‑service...