CVE-2026-23459
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
03/04/2026
Última modificación:
27/04/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS<br />
<br />
Blamed commits forgot that vxlan/geneve use udp_tunnel[6]_xmit_skb() which<br />
call iptunnel_xmit_stats().<br />
<br />
iptunnel_xmit_stats() was assuming tunnels were only using<br />
NETDEV_PCPU_STAT_TSTATS.<br />
<br />
@syncp offset in pcpu_sw_netstats and pcpu_dstats is different.<br />
<br />
32bit kernels would either have corruptions or freezes if the syncp<br />
sequence was overwritten.<br />
<br />
This patch also moves pcpu_stat_type closer to dev->{t,d}stats to avoid<br />
a potential cache line miss since iptunnel_xmit_stats() needs to read it.
Impacto
Puntuación base 3.x
8.20
Gravedad 3.x
ALTA