Tracker / CVE-2026-23204
CVE-2026-23204
High 7.1
In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values. Use skb_header_pointer_careful() instead. GangMin Kim provided a report and a repro fooling u32_classify(): BUG: KASAN: slab-out-of-bounds in u32_classify+0x1180/0x11b0 net/sched/cls_u32.c:221
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 2.6.35.1 → 6.6.124 |
| linux | linux_kernel · 6.13 → 6.18.10 |
| linux | linux_kernel · 6.7 → 6.12.70 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.