CVE-2026-23154

A flaw was found in the Linux kernel's network GSO (Generic Segmentation Offload) handling. When forwarding GRO packets with frag_lists through XLAT (IPv4/IPv6 translation), the skb_segment_list function incorrectly processes packets where only the head skb header is translated, leading to protocol inconsistencies in the fragment list.

This is primarily a performance and correctness issue rather than a security vulnerability. The bug causes reduced network throughput in specific NAT64/XLAT scenarios (IPv4 access via IPv6-only upstream), but does not enable code execution or privilege escalation. The C:H/I:H ratings in the template score are not warranted.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.