Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-45847

In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE when accessing forward path array Although unlikely, recent support for IPIP tunnels increases chances of reaching this WARN_ON_ONCE if userspace manages to build a sufficiently long forward path. Remove it.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:04bb1c9af00d609d098e9b097d99502ad899326c562c711606f12517986c8d8a
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"548244c2f542aa0ad49453e9306e715a3877bc44","status":"affected","version":"ddb94eafab8b597b05904c8277194ea2d6357fa9","versionType":"git"},{"lessThan":"dcf9b3c90e5560339649d088836529883fb509f3","status":"affected","version":"ddb94eafab8b597b05904c8277194ea2d6357fa9","versionType":"git"},{"lessThan":"9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6","status":"affected","version":"ddb94eafab8b597b05904c8277194ea…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/core/dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.13"},{"lessThan":"5.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/core/dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"548244c2f542aa0ad49453e9306e715a3877bc44","status":"affected","version":"ddb94eafab8b597b05904c8277194ea2d6357fa9","versionType":"git"},{"lessThan":"dcf9b3c90e5560339649d088836529883fb509f3","status":"affected","version":"ddb94eafab8b597b05904c8277194ea2d6357fa9","versionType":"git"},{"lessThan":"9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6","status":"affected","version":"ddb94eafab8b597b05904c8277194ea…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/008e7a7c293b30bc43e4368dac6ea3808b75a572"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/50422613185d505201167e8bdd2f2700790d5db6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/548244c2f542aa0ad49453e9306e715a3877bc44"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/959ea349c7e2d4edf07b6838ca7e59345fe61a08"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/a78d055ba7c31103ad02f8eceb0c452e154d2660"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/dcf9b3c90e5560339649d088836529883fb509f3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9aa610268a9f603f02211ba09bf88dea098ba09fd454402a63a1c46e4d38547e · sha256:140e2951f5b9612e… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer