Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23254

In the Linux kernel, the following vulnerability has been resolved: net: gro: fix outer network offset The udp GRO complete stage assumes that all the packets inserted the RX have the `encapsulation` flag zeroed. Such assumption is not true, as a few H/W NICs can set such flag when H/W offloading the checksum for an UDP encapsulated traffic, the tun driver can inject GSO packets with UDP encapsulation and the problematic layout can also be created via a veth based setup. Due to the above, in
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:53e084d950703200d1f203e78542df85f7a89c0ea9e06169c2900dd8d17fdfeb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/gro.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.124","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.70","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.10","versionType":"semver"},{"lessThanOrEqual":"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9b2048c186a0a947ecdfcd072061b4a585df63c8ddff209a87646ca2e1af0463 · sha256:90dd345b9a4d30a4… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/gro.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9d40a85138568696387ef04cd004c64612a70874","status":"affected","version":"af276a5ac8e938c8b058e3e124073cc1e322d98b","versionType":"git"},{"lessThan":"b83557bc6f560433fe5d727e241069f8db5ba709","status":"affected","version":"5ef31ea5d053a8f493a772ebad3f3ce82c35d845","versionType":"git"},{"lessThan":"2e5edb69e5d0e23ef248c56fc977039268c77a7b","status":"affected","version":"5ef31ea5d053a8f493a772ebad3f3ce…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9b2048c186a0a947ecdfcd072061b4a585df63c8ddff209a87646ca2e1af0463 · sha256:90dd345b9a4d30a4… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/gro.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.124","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.70","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.10","versionType":"semver"},{"lessThanOrEqual":"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9b2048c186a0a947ecdfcd072061b4a585df63c8ddff209a87646ca2e1af0463 · sha256:90dd345b9a4d30a4… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/gro.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9d40a85138568696387ef04cd004c64612a70874","status":"affected","version":"af276a5ac8e938c8b058e3e124073cc1e322d98b","versionType":"git"},{"lessThan":"b83557bc6f560433fe5d727e241069f8db5ba709","status":"affected","version":"5ef31ea5d053a8f493a772ebad3f3ce82c35d845","versionType":"git"},{"lessThan":"2e5edb69e5d0e23ef248c56fc977039268c77a7b","status":"affected","version":"5ef31ea5d053a8f493a772ebad3f3ce…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9b2048c186a0a947ecdfcd072061b4a585df63c8ddff209a87646ca2e1af0463 · sha256:90dd345b9a4d30a4… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/2e5edb69e5d0e23ef248c56fc977039268c77a7b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9b2048c186a0a947ecdfcd072061b4a585df63c8ddff209a87646ca2e1af0463 · sha256:90dd345b9a4d30a4… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/5c2c3c38be396257a6a2e55bd601a12bb9781507"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9b2048c186a0a947ecdfcd072061b4a585df63c8ddff209a87646ca2e1af0463 · sha256:90dd345b9a4d30a4… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/9d40a85138568696387ef04cd004c64612a70874"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9b2048c186a0a947ecdfcd072061b4a585df63c8ddff209a87646ca2e1af0463 · sha256:90dd345b9a4d30a4… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/b83557bc6f560433fe5d727e241069f8db5ba709"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9b2048c186a0a947ecdfcd072061b4a585df63c8ddff209a87646ca2e1af0463 · sha256:90dd345b9a4d30a4… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer