CVE-2026-64410

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> netfilter: flowtable: IPIP tunnel hardware offload is not yet support<br /> <br /> No driver supports for IPIP tunnels yet, give up early on setting up the<br /> hardware offload for this scenario.<br /> <br /> This patch adds a stub that can be enhanced to add more configuration<br /> that are currently not supported. As of now, the offload work is<br /> enqueued to the worker, then ignored if the hardware offload<br /> configuration is not supported.<br /> <br /> Check the NF_FLOW_HW flag to know if this entry was already tried once<br /> to be offloaded so this is not retried on refresh when unsupported. Move<br /> NF_FLOW_HW flag check to nf_flow_offload_add(). If this NF_FLOW_HW flag<br /> is unset the _del and _stats variants are never called.<br /> <br /> This can be updated later on to skip hardware offload work to be queued<br /> in case hardware offload does not support it.