cbcvebase.
CVE-2026-23204
published 2026-02-14

CVE-2026-23204: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully…

PriorityP429high7.1CVSS 3.1
AVLACLPRLUINSUCHINAH
EPSS
0.12%
2.4th percentile
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values. Use skb_header_pointer_careful() instead. GangMin Kim provided a report and a repro fooling u32_classify(): BUG: KASAN: slab-out-of-bounds in u32_classify+0x1180/0x11b0 net/sched/cls_u32.c:221

Affected

66 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.18.10-1 (forky)linux 6.18.10-1 (forky)
linuxlinux
linuxlinux>= fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d < 66e4b63d61c15de6ca5332d9ca6db59a404d713666e4b63d61c15de6ca5332d9ca6db59a404d7136
linuxlinux>= fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d < 29681ed51e737be14d18ecd1c304c57002e4b72c29681ed51e737be14d18ecd1c304c57002e4b72c
linuxlinux>= fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d < cfa745830e45ecb75c061aa34330ee0cac941cc7cfa745830e45ecb75c061aa34330ee0cac941cc7
linuxlinux>= fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d < 13336a6239b9d7c6e61483017bb8bdfe3ceb10a513336a6239b9d7c6e61483017bb8bdfe3ceb10a5
linuxlinux>= fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d < e41a23e61259f5526af875c3b86b3d42a9bae0e5e41a23e61259f5526af875c3b86b3d42a9bae0e5
linuxlinux>= fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d < 8a672f177ebe19c93d795fbe967846084fbc79438a672f177ebe19c93d795fbe967846084fbc7943
linuxlinux>= fbc2e7d9cf49e0bf89b9e91fd60a06851a855c5d < cabd1a976375780dabab888784e356f574bbaed8cabd1a976375780dabab888784e356f574bbaed8
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel
linuxlinux_kernel>= 0 < 6.12.73-16.12.73-1
linuxlinux_kernel>= 0 < 6.18.10-16.18.10-1

CVSS provenance

nvdv3.17.1HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
osv7.1HIGH
vendor_ubuntu7.8HIGH
vendor_debian7.1HIGH
vendor_msrc7.1HIGH
vendor_redhat7.1HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.