Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23011

In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_gre: make ipgre_header() robust Analog to commit db5b4e39c4e6 ("ip6_gre: make ip6gre_header() robust") Over the years, syzbot found many ways to crash the kernel in ipgre_header() [1]. This involves team or bonding drivers ability to dynamically change their dev->needed_headroom and/or dev->hard_header_len In this particular crash mld_newpack() allocated an skb with a too small reserve/headroom, and by the time mld
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c07b0e920d858cfc564d4e79fe1dda715a71ce9167388cfda23837d052cefce7
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 7 assertions

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/3

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/ip_gre.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.10"},{"lessThan":"3.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThanOrE…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/affected/1

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/2

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/ip_gre.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"eeb9a521de40c6fadccc12fa5205e5a1b364d5a8","status":"affected","version":"c54419321455631079c7d6e60bc732dd0c5914c5","versionType":"git"},{"lessThan":"8d5b6b2d79c1c22a5b0db1187a6439dff375a022","status":"affected","version":"c54419321455631079c7d6e60bc732dd0c5914c5","versionType":"git"},{"lessThan":"2ecf0aa7cc262472a9599cc51ba02ada0897a17a","status":"affected","version":"c54419321455631079c7d6e60bc7…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/affected/0

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/4

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/0

Affected products and versions

7 source assertions
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/3
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/ip_gre.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.10"},{"lessThan":"3.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThanOrE…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/affected/1
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/2
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/ip_gre.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"eeb9a521de40c6fadccc12fa5205e5a1b364d5a8","status":"affected","version":"c54419321455631079c7d6e60bc732dd0c5914c5","versionType":"git"},{"lessThan":"8d5b6b2d79c1c22a5b0db1187a6439dff375a022","status":"affected","version":"c54419321455631079c7d6e60bc732dd0c5914c5","versionType":"git"},{"lessThan":"2ecf0aa7cc262472a9599cc51ba02ada0897a17a","status":"affected","version":"c54419321455631079c7d6e60bc7…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/affected/0
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/4
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/affected/0

Source references

8 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/adp/1/references/0
{"url":"https://git.kernel.org/stable/c/06fe0801396a36cab865b34f666de1d65bc5ce8e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/2ecf0aa7cc262472a9599cc51ba02ada0897a17a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/554201ed0a8f4d32e719f42caeaeb2735a9ed6ca"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/8d5b6b2d79c1c22a5b0db1187a6439dff375a022"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/aa57bfea4674e6da8104fa3a37760a6f5f255dad"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/e67c577d89894811ce4dcd1a9ed29d8b63476667"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/eeb9a521de40c6fadccc12fa5205e5a1b364d5a8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5df18e002ce4ccbcf9b0340ddcdab694c97e15ea12478c77e9bc9fc547d20b26 · sha256:71d79bcc01862ef5… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer