CVE-2026-23001

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
25/01/2026
Last modified:
25/01/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> macvlan: fix possible UAF in macvlan_forward_source()<br /> <br /> Add RCU protection on (struct macvlan_source_entry)-&gt;vlan.<br /> <br /> Whenever macvlan_hash_del_source() is called, we must clear<br /> entry-&gt;vlan pointer before RCU grace period starts.<br /> <br /> This allows macvlan_forward_source() to skip over<br /> entries queued for freeing.<br /> <br /> Note that macvlan_dev are already RCU protected, as they<br /> are embedded in a standard netdev (netdev_priv(ndev)).<br /> <br /> https: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u

Impact