Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23095

In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memleak below. [0] The repro generated a GUE packet with its inner protocol 0. gue_udp_recv() returns -guehdr->proto_ctype for "resubmit" in ip_protocol_deliver_rcu(), but this only works with non-zero protocol number. Let's drop such packets. Note that 0 is a valid number (IPv6 Hop-by-Hop Option). I think it is not practical to encap HOPOPT in GUE, so onc
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:7e654f2b277af0b83d7c65f50ee1018ffa05b8fcbd9dd28587ab3a335ee1cf84
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 7 assertions

{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/4

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/2

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/fou_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"886f186328b718400dbf79e1bc8cbcbd710ab766","status":"affected","version":"37dd0247797b168ad1cc7f5dbec825a1ee66535b","versionType":"git"},{"lessThan":"380a82d36e37db49fd41ecc378c22fd29392e96a","status":"affected","version":"37dd0247797b168ad1cc7f5dbec825a1ee66535b","versionType":"git"},{"lessThan":"536f5bbc322eb1e175bdd1ced22b236a951c4d8f","status":"affected","version":"37dd0247797b168ad1cc7f5dbe…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/fou_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.18"},{"lessThan":"3.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThanO…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/affected/1

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/3

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/0

{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/1

Affected products and versions

7 source assertions
{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/4
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/2
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv4/fou_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"886f186328b718400dbf79e1bc8cbcbd710ab766","status":"affected","version":"37dd0247797b168ad1cc7f5dbec825a1ee66535b","versionType":"git"},{"lessThan":"380a82d36e37db49fd41ecc378c22fd29392e96a","status":"affected","version":"37dd0247797b168ad1cc7f5dbec825a1ee66535b","versionType":"git"},{"lessThan":"536f5bbc322eb1e175bdd1ced22b236a951c4d8f","status":"affected","version":"37dd0247797b168ad1cc7f5dbe…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv4/fou_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.18"},{"lessThan":"3.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.249","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.199","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.162","versionType":"semver"},{"lessThanO…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/affected/1
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/3
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/0
{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","vendor":"Siemens","versions":[{"lessThan":"*","status":"affected","version":"V3.1.6","versionType":"custom"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://cert-portal.siemens.com/productcert/html/ssa-019113.html"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/adp/1/references/0
{"url":"https://git.kernel.org/stable/c/380a82d36e37db49fd41ecc378c22fd29392e96a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/536f5bbc322eb1e175bdd1ced22b236a951c4d8f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/5437a279804ced8088cabb945dba88a26d828f8c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/886f186328b718400dbf79e1bc8cbcbd710ab766"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/9a56796ad258786d3624eef5aefba394fc9bdded"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ce569b389a5c78d64788a5ea94560e17fa574b35"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/f87b9b7a618c82e7465e872eb10e14c803871892"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:c70d806d884fdf0ad953b3b5fdd0330e0357d53eb039802a5d7cfd31b99bef73 · sha256:c55b7d16038c9a46… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer