PT-2026-43726 · Linux+3 · Linux+144

Ulrich · Published 2026-05-27 · Updated 2026-05-29 · CVE-2026-45859

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A regression in the netfilter nfnetlink queue component causes UDP packets to be dropped instead of queued. This occurs when an application has not set the F GSO capability flag and a Generic Segmentation Offload (GSO) packet with an unconfirmed nf conn entry is received. The issue stems from the shared-unconfirmed check being performed after the skb gso segment() function, leading to an elevated use count due to skb clone and subsequent packet drops. This behavior is specific to UDP, as TCP SYN packets are not aggregated by Generic Receive Offload (GRO).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-45859

Affected Products

Linux

Linux-Allwinner-5.19

Linux-Aws

Linux-Aws-5.0

Linux-Aws-5.11

Linux-Aws-5.13

Linux-Aws-5.15

Linux-Aws-5.19

Linux-Aws-5.3

Linux-Aws-5.8

Linux-Aws-6.14

Linux-Aws-6.17

Linux-Aws-6.2

Linux-Aws-6.5

Linux-Aws-6.8

Linux-Aws-Fips

Linux-Azure

Linux-Azure-5.11

Linux-Azure-5.13

Linux-Azure-5.15

Linux-Azure-5.19

Linux-Azure-5.3

Linux-Azure-5.8

Linux-Azure-6.11

Linux-Azure-6.14

Linux-Azure-6.17

Linux-Azure-6.2

Linux-Azure-6.5

Linux-Azure-6.8

Linux-Azure-Edge

Linux-Azure-Fde

Linux-Azure-Fde-5.15

Linux-Azure-Fde-5.19

Linux-Azure-Fde-6.14

Linux-Azure-Fde-6.17

Linux-Azure-Fde-6.2

Linux-Azure-Fde-6.8

Linux-Azure-Fips

Linux-Azure-Nvidia

Linux-Azure-Nvidia-6.14

Linux-Bluefield

Linux-Fips

Linux-Gcp

Linux-Gcp-5.11

Linux-Gcp-5.13

Linux-Gcp-5.15

Linux-Gcp-5.19

Linux-Gcp-5.3

Linux-Gcp-5.8

Linux-Gcp-6.11

Linux-Gcp-6.14

Linux-Gcp-6.17

Linux-Gcp-6.2

Linux-Gcp-6.5

Linux-Gcp-6.8

Linux-Gcp-Fips

Linux-Gke

Linux-Gke-4.15

Linux-Gkeop-5.15

Linux-Gke-5.4

Linux-Gkeop

Linux-Hwe

Linux-Hwe-5.11

Linux-Hwe-5.13

Linux-Hwe-5.15

Linux-Hwe-5.19

Linux-Hwe-5.8

Linux-Hwe-6.11

Linux-Hwe-6.14

Linux-Hwe-6.17

Linux-Hwe-6.2

Linux-Hwe-6.5

Linux-Hwe-6.8

Linux-Hwe-Edge

Linux-Ibm

Linux-Ibm-5.15

Linux-Ibm-6.8

Linux-Intel-5.13

Linux-Intel-Iot-Realtime

Linux-Intel-Iotg

Linux-Intel-Iotg-5.15

Linux-Kvm

Linux-Lowlatency

Linux-Lowlatency-Hwe-5.15

Linux-Lowlatency-Hwe-5.19

Linux-Lowlatency-Hwe-6.11

Linux-Lowlatency-Hwe-6.2

Linux-Lowlatency-Hwe-6.5

Linux-Lowlatency-Hwe-6.8

Linux-Lts

Linux-Nvidia

Linux-Nvidia-6.11

Linux-Nvidia-6.17

Linux-Nvidia-6.2

Linux-Nvidia-6.5

Linux-Nvidia-6.8

Linux-Nvidia-Lowlatency

Linux-Nvidia-Tegra

Linux-Nvidia-Tegra-5.15

Linux-Nvidia-Tegra-Igx

Linux-Oem

Linux-Oem-5.10

Linux-Oem-5.13

Linux-Oem-5.14

Linux-Oem-5.17

Linux-Oem-5.6

Linux-Oem-6.0

Linux-Oem-6.1

Linux-Oem-6.11

Linux-Oem-6.14

Linux-Oem-6.17

Linux-Oem-6.5

Linux-Oem-6.8

Linux-Oracle

Linux-Oracle-5.0

Linux-Oracle-5.11

Linux-Oracle-5.13

Linux-Oracle-5.15

Linux-Oracle-5.3

Linux-Oracle-5.8

Linux-Oracle-6.14

Linux-Oracle-6.17

Linux-Oracle-6.5

Linux-Oracle-6.8

Linux-Raspi

Linux-Raspi-Realtime

Linux-Raspi2

Linux-Realtime

Linux-Realtime-6.14

Linux-Realtime-6.17

Linux-Realtime-6.8

Linux-Riscv

Linux-Riscv-5.11

Linux-Riscv-5.15

Linux-Riscv-5.19

Linux-Riscv-5.8

Linux-Riscv-6.14

Linux-Riscv-6.17

Linux-Riscv-6.5

Linux-Riscv-6.8

Linux-Starfive-5.19

Linux-Starfive-6.2

Linux-Starfive-6.5

Linux-Xilinx

Linux-Xilinx-Zynqmp

References · 13

• https://cve.org/CVERecord?id=CVE-2026-45859 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-45859 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-45859 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-45859 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45859 · Security Note
• https://ubuntu.com/security/CVE-2026-45859 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-45859 · Vendor Advisory
• https://git.kernel.org/stable/c/23901aa6b8a2f294c4b774436b4691f3ff863a8f · Note
• https://git.kernel.org/stable/c/79b713ef4261a8ead96af4703f89d0b5f25532e2 · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-45859 · Note
• https://git.kernel.org/stable/c/207b3ebacb6113acaaec0d171d5307032c690004 · Note
• https://git.kernel.org/stable/c/b740e7ddd7ca0dbfeafca3f5e52717206cf28524 · Note
• https://git.kernel.org/linus/207b3ebacb6113acaaec0d171d5307032c690004 · Note