PT-2026-8138 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-02-19 · CVE-2026-23143

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a misalignment issue within the struct virtnet info structure, specifically related to the virtio net component. This issue arises from the misalignment of rss trailer.hash key data and rss hash key data members, causing a one-byte shift in the RSS key passed to the device, potentially truncating the last byte and adding an uninitialized byte at the beginning. The issue is addressed by utilizing the TRAILING OVERLAP() helper to ensure proper alignment of these members. The vulnerability is present in the structure definition of struct virtio net rss config trailer and struct virtnet info.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23143

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23143.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-23143 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-23143 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23143 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23143 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23143 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23143 · Vendor Advisory
• https://git.kernel.org/stable/c/4156c3745f06bc197094b9ee97a9584e69ed00bf · Patch
• https://cve.org/CVERecord?id=CVE-2026-23143 · Security Note
• https://git.kernel.org/stable/c/ae48108c2310f1dd700e0dbb655c2f1d92ed00fc · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23143 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/4156c3745f06bc197094b9ee97a9584e69ed00bf · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-23143 · Note
• https://twitter.com/CVEnew/status/2022702076602781951 · Twitter Post