PT-2026-6118 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-02-04 · CVE-2026-23048

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where the standard UDP receive path does not utilize skb->destructor, but the skmsg layer does through a call to skb set owner sk safe() from udp read skb(). This triggers a warning in skb attempt defer free() because skb orphan() is not called. The issue is resolved by calling skb orphan().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23048

Affected Products

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23048.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-23048 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23048 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23048 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23048 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23048 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23048 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23048 · Vendor Advisory
• https://git.kernel.org/linus/e5c8eda39a9fc1547d1398d707aa06c1d080abdd · Note
• https://t.me/CVEtracker/43739 · Telegram Post
• https://git.kernel.org/stable/c/0c63d5683eae6a7b4d81382bcbecb2a19feff90d · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/e5c8eda39a9fc1547d1398d707aa06c1d080abdd · Note