CVE-2026-23459

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

In the Linux kernel, the following vulnerability has been resolved:

ip tunnel: adapt iptunnel xmit stats() to NETDEV PCPU STAT DSTATS

Blamed commits forgot that vxlan/geneve use udp tunnel[6] xmit skb() which call iptunnel xmit stats().

iptunnel xmit stats() was assuming tunnels were only using NETDEV PCPU STAT TSTATS.

@syncp offset in pcpu sw netstats and pcpu dstats is different.

32bit kernels would either have corruptions or freezes if the syncp sequence was overwritten.

This patch also moves pcpu stat type closer to dev->{t,d}stats to avoid a potential cache line miss since iptunnel xmit stats() needs to read it.

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-23459

Linux