CVE-2026-45847
net: remove WARN_ON_ONCE when accessing forward path array
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE when accessing forward path array Although unlikely, recent support for IPIP tunnels increases chances of reaching this WARN_ON_ONCE if userspace manages to build a sufficiently long forward path. Remove it.
Timeline
- CVE published
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
5.13
References 7
git.kernel.org
- stable/c/548244c2f542aa0ad49453e9306e715a3877bc44
- stable/c/dcf9b3c90e5560339649d088836529883fb509f3
- stable/c/9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6
- stable/c/959ea349c7e2d4edf07b6838ca7e59345fe61a08
- stable/c/50422613185d505201167e8bdd2f2700790d5db6
- stable/c/a78d055ba7c31103ad02f8eceb0c452e154d2660
- stable/c/008e7a7c293b30bc43e4368dac6ea3808b75a572