CVE-2026-23254 — Linux vulnerability
8 documents7 sources
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 18
Description
In the Linux kernel, the following vulnerability has been resolved:
net: gro: fix outer network offset
The udp GRO complete stage assumes that all the packets inserted the RX
have the `encapsulation` flag zeroed. Such assumption is not true, as a
few H/W NICs can set such flag when H/W offloading the checksum for
an UDP encapsulated traffic, the tun driver can inject GSO packets with
UDP encapsulation and the problematic layout can also be created via
a veth based setup.
Due to the above, in …
Affected Packages3 packages
▶CVEListV5linux/linuxaf276a5ac8e938c8b058e3e124073cc1e322d98b — 9d40a85138568696387ef04cd004c64612a70874+5
🔴Vulnerability Details
4OSV▶
CVE-2026-23254: In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO complete stage assumes that all the↗2026-03-18
GHSA▶
GHSA-wjrj-hvqv-fw2v: In the Linux kernel, the following vulnerability has been resolved:
net: gro: fix outer network offset
The udp GRO complete stage assumes that all t↗2026-03-18