CVE-2026-23326 — Missing Initialization of Resource in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
xsk: Fix fragment node deletion to prevent buffer leak
After commit b692bf9a7543 ("xsk: Get rid of xdp_buff_xsk::xskb_list_node"),
the list_node field is reused for both the xskb pool list and the buffer
free list, this causes a buffer leak as described below.
xp_free() checks if a buffer is already on the free list using
list_empty(&xskb->list_node). When list_del() is used to remove a node
from the xskb pool list, it doesn'…
Affected Packages4 packages
▶CVEListV5linux/linux560c974b7ccd95bb9ff20df77f6654283e45c9c6 — 5172adf9efb8298a52f4dcdc3f98d4d9d1e06a6d+5
🔴Vulnerability Details
3OSV▶
CVE-2026-23326: In the Linux kernel, the following vulnerability has been resolved: xsk: Fix fragment node deletion to prevent buffer leak After commit b692bf9a7543 (↗2026-03-25
GHSA▶
GHSA-6r9h-pc2x-g962: In the Linux kernel, the following vulnerability has been resolved:
xsk: Fix fragment node deletion to prevent buffer leak
After commit b692bf9a7543↗2026-03-25