CVE-2026-23154 — CVE & Security Advisory Radar

🎯 CVE-2026-23154 LOW 3.1 🔥 EPSS 12% 🇪🇺 EUVD

📄 .md Alle CVEs anzeigen ✕

CVE-2026-23154 | In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling by properly checking the SKB_GSO_DODGY flag for frag_list GSO packets, addressing low throughput issues observed when a station accesses IPv4 servers via hotspots with an IPv6-only upstream interface. Specifically, it fixes a bug in GSO segmentation when forwarding GRO packets containing a frag_list.

In the Linux kernel, the following vulnerability has been resolved:

net: fix segmentation of forwarding fraglist GRO

This patch enhances GSO segment handling by properly checking
the SKB_GSO_DODGY flag for frag_list GSO packets, addressing
low throughput issues observed when a station accesses IPv4
servers via hotspots with an IPv6-only upstream interface.

Specifically, it fixes a bug in GSO segmentation when forwarding
GRO packets containing a frag_list. The function skb_segment_list
cannot correctly process GRO skbs that have been converted by XLAT,
since XLAT only translates the header of the head skb. Consequently,
skbs in the frag_list may remain untranslated, resulting in protocol
inconsistencies and reduced throughput.

To address this, the patch explicitly sets the SKB_GSO_DODGY flag
for GSO packets in XLAT's IPv4/IPv6 protocol translation helpers
(bpf_skb_proto_4_to_6 and bpf_skb_proto_6_to_4). This marks GSO
packets as potentially modified after protocol translation. As a
result, GSO segmentation will avoid using skb_segment_list and
instead falls back to skb_segment for packets with the SKB_GSO_DODGY
flag. This ensures that only safe and fully translated frag_list
packets are processed by skb_segment_list, resolving protocol
inconsistencies and improving throughput when forwarding GRO packets
converted by XLAT.

Klassifikation & Betroffenheit:

Linux Linux patch: 6.18.9Linux patch: 0Linux patch: 6.6.130Linux 9fd1ff5d2ac7181844735806b0a703c942365291 <2cbef9ea5a0ac51863ede35c45f26931a85d3888Linux 9fd1ff5d2ac7181844735806b0a703c942365291 <3e62db1e3140449608975e29e0979cc5f3b1cc07Linux patch: 6.19Linux 9fd1ff5d2ac7181844735806b0a703c942365291 <9122d7280b2303e835cdfec156bd932ac1f586edLinux 9fd1ff5d2ac7181844735806b0a703c942365291 <3d48d59235c494d34e32052f768393111c0806ef

Improper Control of Generation of Code ('Code Injection') 🎯 Medium

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

🛡️ Empfohlene Mitigation: Refactor your program so that you do not have to dynamically generate code.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-35 · Leverage Executable Code in Non-Executab… (Very High) CAPEC-77 · Manipulating User-Controlled Variables (Very High) CAPEC-242 · Code Injection (High)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1027.006 · Obfuscated Files or Information: H… T1027.009 · Obfuscated Files or Information: E… T1564.009 · Hide Artifacts: Resource Forking

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2021-47476 4.6 CVE-2024-24857 4.6 CVE-2024-24858 4.6 CVE-2024-24859 4.6 CVE-2024-24860 4.6

🩹 Patch verfügbar (OSV):

🩹 Kernel ≥ 6.1.167 🩹 Kernel ≥ 6.6.130 🩹 Kernel ≥ 6.12.69 🩹 Kernel ≥ 6.18.9

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 02/2026

Heute 14.09.

Veröffentlicht:14.02.2026

Aktualisiert:14.07.2026 13:18

Assigner (CNA):Linux

EUVD-ID:EUVD-2026-5883

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

Tier	2026-08-29	2026-09-14
≥90 %	4	0
≥50 %	4	0
≥10 %	3	0
<10 %	304	300

3.1 LOW

🇪🇺 EUVD

EPSS

12%

CVE-2026-23154 💻 Lokal 🔓 Keine Authentifizierung nötig

Linux

CVE-2026-23154 | In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling by properly checking the SKB_GSO_DODGY flag for frag_list GSO packets, addressing low throughput issues observed when a station accesses IPv4 servers via hotspots with an IPv6-only upstream interface. Specifically, it fixes a bug in GSO segmentation when forwarding GRO packets containing a frag_list.

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

14.02.2026

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub