CVE-2026-23284 — Improper Update of Reference Count in Linux
Severity
6.4MEDIUM
No vectorEPSS
0.0%
top 90.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()
Reset eBPF program pointer to old_prog and do not decrease its ref-count
if mtk_open routine in mtk_xdp_setup() fails.
Affected Packages5 packages
▶CVEListV5linux/linux7c26c20da5d420cde55618263be4aa2f6de53056 — 8c2d76a9658a4dbfcf02f2693a97e2d5ff42197a+6
🔴Vulnerability Details
3OSV▶
CVE-2026-23284: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp↗2026-03-25
OSV▶
net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()↗2026-03-25
GHSA▶
GHSA-qgrv-hh4h-p235: In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xd↗2026-03-25
📋Vendor Advisories
3Red Hat▶
kernel: net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()↗2026-03-25
Microsoft▶
net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup()↗2026-03-10
Debian▶
CVE-2026-23284: linux - In the Linux kernel, the following vulnerability has been resolved: net: ethern...↗2026