CVE-2026-23046

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0 #10

Description The Linux kernel contains a flaw within the virtio net subsystem. Specifically, an inconsistency exists in how memory is allocated and freed for the RSS header. The initial allocation uses virtio device->device, while the deallocation uses net device->device, leading to a device mismatch and a devres warning. This can potentially cause system instability.

Recommendations Update to Linux kernel version 6.18.0 #10 or later.