CVE-2026-23204

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the networking scheduler (cls u32) where the skb header pointer() function does not fully validate negative offset values. This can lead to out-of-bounds access. The recommended solution is to utilize skb header pointer careful() instead. A report and reproduction case were provided by GangMin Kim demonstrating a kernel slab out-of-bounds condition in the u32 classify() function.

Recommendations Utilize skb header pointer careful() instead of skb header pointer().