CVE-2026-23459

Last refreshed2026-10-23

Status: UPDATED | Advisory ID: CVE-2026-23459

Key Details

CVE	CVE-2026-23459
CVSS Score / Version	8.2 (High) / CVSS v3.1
Updated	2026-10-21
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is low; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS

Blamed commits forgot that vxlan/geneve use udp_tunnel[6]_xmit_skb() which

call iptunnel_xmit_stats().

iptunnel_xmit_stats() was assuming tunnels were only using

NETDEV_PCPU_STAT_TSTATS.

@syncp offset in pcpu_sw_netstats and pcpu_dstats is different.

32bit kernels would either have corruptions or freezes if the syncp

sequence was overwritten.

This patch also moves pcpu_stat_type closer to dev->{t,d}stats to avoid

a potential cache line miss since iptunnel_xmit_stats() needs to read it. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-23459
CVE	https://www.cve.org/CVERecord?id=CVE-2026-23459

Source

Reference

NVD

CVE