Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Linux Kernel Vulnerability: IPv4/IPv6 Data Corruption and Slow Networking

UBUNTU-CVE-2026-23154
Summary

A bug in the Linux kernel could cause data corruption and slow networking when sending packets between IPv4 and IPv6 networks. This has been fixed with a patch that ensures packets are properly translated and segmented. If you're using the Linux kernel, you should update to the latest version to prevent potential data corruption and slow networking issues.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versionsFix available
canonical linux-hwe-edge All versions
canonical linux-aws-5.0 All versions
canonical linux-aws-5.3 All versions
canonical linux-azure All versions
canonical linux-azure-5.3 All versions
canonical linux-azure-edge All versions
canonical linux-gcp All versions
canonical linux-gcp-5.3 All versions
canonical linux-gke-4.15 All versions
canonical linux-gke-5.4 All versions
canonical linux-gkeop-5.4 All versions
canonical linux-hwe All versions
canonical linux-hwe-edge All versions
canonical linux-oem All versions
canonical linux-oracle-5.0 All versions
canonical linux-oracle-5.3 All versions
canonical linux-aws-5.11 All versions
canonical linux-aws-5.13 All versions
canonical linux-aws-5.15 All versions
canonical linux-aws-5.8 All versions
canonical linux-azure-5.11 All versions
canonical linux-azure-5.13 All versions
canonical linux-azure-5.15 All versions
canonical linux-azure-5.8 All versions
canonical linux-azure-fde All versions
canonical linux-gcp-5.11 All versions
canonical linux-gcp-5.13 All versions
canonical linux-gcp-5.15 All versions
canonical linux-gcp-5.8 All versions
canonical linux-gke All versions
canonical linux-gke-5.15 All versions
canonical linux-gkeop All versions
canonical linux-gkeop-5.15 All versions
canonical linux-hwe-5.11 All versions
canonical linux-hwe-5.13 All versions
canonical linux-hwe-5.15 All versions
canonical linux-hwe-5.8 All versions
canonical linux-ibm-5.15 All versions
canonical linux-intel-5.13 All versions
canonical linux-intel-iotg-5.15 All versions
canonical linux-lowlatency-hwe-5.15 All versions
canonical linux-nvidia-tegra-5.15 All versions
canonical linux-oem-5.10 All versions
canonical linux-oem-5.13 All versions
canonical linux-oem-5.14 All versions
canonical linux-oem-5.6 All versions
canonical linux-oracle-5.11 All versions
canonical linux-oracle-5.13 All versions
canonical linux-oracle-5.15 All versions
canonical linux-oracle-5.8 All versions
canonical linux-raspi2 All versions
canonical linux-riscv All versions
canonical linux-riscv-5.11 All versions
canonical linux-riscv-5.15 All versions
canonical linux-riscv-5.8 All versions
canonical linux All versions
canonical linux-allwinner-5.19 All versions
canonical linux-aws All versions
canonical linux-aws-5.19 All versions
canonical linux-aws-6.2 All versions
canonical linux-aws-6.5 All versions
canonical linux-aws-6.8 All versions
canonical linux-azure All versions
canonical linux-azure-5.19 All versions
canonical linux-azure-6.2 All versions
canonical linux-azure-6.5 All versions
canonical linux-azure-6.8 All versions
canonical linux-azure-fde All versions
canonical linux-azure-fde-5.19 All versions
canonical linux-azure-fde-6.2 All versions
canonical linux-azure-fde-6.8 All versions
canonical linux-gcp All versions
canonical linux-gcp-5.19 All versions
canonical linux-gcp-6.2 All versions
canonical linux-gcp-6.5 All versions
canonical linux-gcp-6.8 All versions
canonical linux-gke All versions
canonical linux-gkeop All versions
canonical linux-hwe-5.19 All versions
canonical linux-hwe-6.2 All versions
canonical linux-hwe-6.5 All versions
canonical linux-hwe-6.8 All versions
canonical linux-ibm All versions
canonical linux-ibm-6.8 All versions
canonical linux-intel-iot-realtime All versions
canonical linux-intel-iotg All versions
canonical linux-kvm All versions
canonical linux-lowlatency All versions
canonical linux-lowlatency-hwe-5.19 All versions
canonical linux-lowlatency-hwe-6.2 All versions
canonical linux-lowlatency-hwe-6.5 All versions
canonical linux-lowlatency-hwe-6.8 All versions
canonical linux-nvidia All versions
canonical linux-nvidia-6.2 All versions
canonical linux-nvidia-6.5 All versions
canonical linux-nvidia-6.8 All versions
canonical linux-nvidia-tegra All versions
canonical linux-nvidia-tegra-igx All versions
canonical linux-oem-5.17 All versions
canonical linux-oem-6.0 All versions
canonical linux-oem-6.1 All versions
canonical linux-oem-6.5 All versions
canonical linux-oracle All versions
canonical linux-oracle-6.5 All versions
canonical linux-oracle-6.8 All versions
canonical linux-raspi All versions
canonical linux-realtime All versions
canonical linux-riscv All versions
canonical linux-riscv-5.19 All versions
canonical linux-riscv-6.5 All versions
canonical linux-riscv-6.8 All versions
canonical linux-starfive-5.19 All versions
canonical linux-starfive-6.2 All versions
canonical linux-starfive-6.5 All versions
canonical linux-xilinx-zynqmp All versions
canonical linux-bluefield All versions
canonical linux-aws-fips All versions
canonical linux-azure-fips All versions
canonical linux-fips All versions
canonical linux-gcp-fips All versions
canonical linux-aws-fips All versions
canonical linux-azure-fips All versions
canonical linux-fips All versions
canonical linux-gcp-fips All versions
canonical linux-intel-iot-realtime All versions
canonical linux-realtime All versions
canonical linux-realtime-6.8 All versions
canonical linux All versions
canonical linux-aws All versions
canonical linux-aws-6.14 All versions
canonical linux-aws-6.17 All versions
canonical linux-azure All versions
canonical linux-azure-6.11 All versions
canonical linux-azure-6.14 All versions
canonical linux-azure-6.17 All versions
canonical linux-azure-fde All versions
canonical linux-azure-fde-6.14 All versions
canonical linux-azure-fde-6.17 All versions
canonical linux-azure-nvidia All versions
canonical linux-azure-nvidia-6.14 All versions
canonical linux-gcp All versions
canonical linux-gcp-6.11 All versions
canonical linux-gcp-6.14 All versions
canonical linux-gcp-6.17 All versions
canonical linux-gke All versions
canonical linux-gkeop All versions
canonical linux-hwe-6.11 All versions
canonical linux-hwe-6.14 All versions
canonical linux-hwe-6.17 All versions
canonical linux-ibm All versions
canonical linux-lowlatency All versions
canonical linux-lowlatency-hwe-6.11 All versions
canonical linux-nvidia All versions
canonical linux-nvidia-6.11 All versions
canonical linux-nvidia-lowlatency All versions
canonical linux-nvidia-tegra All versions
canonical linux-oem-6.11 All versions
canonical linux-oem-6.14 All versions
canonical linux-oem-6.17 All versions
canonical linux-oem-6.8 All versions
canonical linux-oracle All versions
canonical linux-oracle-6.14 All versions
canonical linux-oracle-6.17 All versions
canonical linux-raspi All versions
canonical linux-raspi-realtime All versions
canonical linux-realtime All versions
canonical linux-riscv All versions
canonical linux-riscv-6.14 All versions
canonical linux-riscv-6.17 All versions
canonical linux-xilinx All versions
canonical linux-aws-fips All versions
canonical linux-azure-fips All versions
canonical linux-fips All versions
canonical linux-gcp-fips All versions
canonical linux-raspi-realtime All versions
canonical linux-realtime All versions
canonical linux-realtime-6.14 All versions
canonical linux All versions
canonical linux-aws All versions
canonical linux-azure All versions
canonical linux-azure-fde All versions
canonical linux-gcp All versions
canonical linux-oracle All versions
canonical linux-raspi All versions
canonical linux-realtime All versions
canonical linux-riscv All versions
Original title
In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling by properly checking the SKB_GSO_DODGY ...
Original description
In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO This patch enhances GSO segment handling by properly checking the SKB_GSO_DODGY flag for frag_list GSO packets, addressing low throughput issues observed when a station accesses IPv4 servers via hotspots with an IPv6-only upstream interface. Specifically, it fixes a bug in GSO segmentation when forwarding GRO packets containing a frag_list. The function skb_segment_list cannot correctly process GRO skbs that have been converted by XLAT, since XLAT only translates the header of the head skb. Consequently, skbs in the frag_list may remain untranslated, resulting in protocol inconsistencies and reduced throughput. To address this, the patch explicitly sets the SKB_GSO_DODGY flag for GSO packets in XLAT's IPv4/IPv6 protocol translation helpers (bpf_skb_proto_4_to_6 and bpf_skb_proto_6_to_4). This marks GSO packets as potentially modified after protocol translation. As a result, GSO segmentation will avoid using skb_segment_list and instead falls back to skb_segment for packets with the SKB_GSO_DODGY flag. This ensures that only safe and fully translated frag_list packets are processed by skb_segment_list, resolving protocol inconsistencies and improving throughput when forwarding GRO packets converted by XLAT.
Published: 14 Feb 2026 · Updated: 13 Mar 2026 · First seen: 9 Mar 2026