CVE-2026-23140

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the bpf subsystem, specifically within the test run functionality. A failure to properly account for the size of the xdp frame structure when determining the allowed metadata size can lead to an uninitialised frame structure during packet transmission in live packet mode. This occurs when userspace provides a metadata size that exceeds the available headroom. The xdp update frame from buff() function is involved in this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.