Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

CVE-2026-23359: Linux Kernel: Kernel Could Allow Malicious Code Execution

CVE-2026-23359 CVE-2026-23359
Summary

The Linux kernel has a flaw that could allow an attacker to write malicious code into memory, potentially leading to a system crash or data corruption. This issue affects systems with Linux kernels and devices that use network interfaces with multiple layers of nesting. To mitigate this issue, update to the latest Linux kernel version.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versions
linux linux_kernel >= 5.15.1, < 5.15.203
>= 5.16, < 6.1.167
>= 6.2, < 6.6.130
>= 6.7, < 6.12.77
>= 6.13, < 6.18.17
>= 6.19, < 6.19.7
5.15
7.0
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
linux linux < 88df604f0d16a692867582350ce3f2fcd22243f1
5.15
Original title
bpf: Fix stack-out-of-bounds write in devmap
Original description
In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix stack-out-of-bounds write in devmap

get_upper_ifindexes() iterates over all upper devices and writes their
indices into an array without checking bounds.

Also the callers assume that the max number of upper devices is
MAX_NEST_DEV and allocate excluded_devices[1+MAX_NEST_DEV] on the stack,
but that assumption is not correct and the number of upper devices could
be larger than MAX_NEST_DEV (e.g., many macvlans), causing a
stack-out-of-bounds write.

Add a max parameter to get_upper_ifindexes() to avoid the issue.
When there are too many upper devices, return -EOVERFLOW and abort the
redirect.

To reproduce, create more than MAX_NEST_DEV(8) macvlans on a device with
an XDP program attached using BPF_F_BROADCAST | BPF_F_EXCLUDE_INGRESS.
Then send a packet to the device to trigger the XDP redirect path.
Vulnerability type
CWE-787 Out-of-bounds Write
Published: 25 Mar 2026 · Updated: 15 Jul 2026 · First seen: 25 Mar 2026