CVE-2026-23143

A structure misalignment flaw was found in the Linux kernel's virtio_net driver. Due to incorrect padding handling between struct virtio_net_rss_config_trailer and the rss_hash_key_data array in struct virtnet_info, the RSS hash key passed to the device is shifted by one byte. This causes the last byte of the intended key to be truncated and replaced with a potentially uninitialized byte at the beginning, leading to incorrect RSS hash computation and minor information disclosure.

This flaw affects virtio network devices using RSS (Receive Side Scaling) functionality in virtualized environments. The impact is primarily functional (incorrect RSS hash distribution) with a minor potential for information disclosure through the uninitialized byte. No crash or privilege escalation occurs.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.