CVE-2026-23262

A memory corruption vulnerability was found in the Linux kernel's Google Virtual Ethernet (gve) driver. The driver and NIC share a memory region for statistics reporting, with the NIC calculating its write offset based on the region size. When queue count is increased, the driver resizes the stats region, but the NIC continues using the old offset calculation, causing out-of-bounds writes past the allocated buffer and corrupting kernel memory.

This flaw affects Google Cloud Platform virtual machines using the gve network driver. Memory corruption occurs when the number of network queues is changed dynamically. The NIC's offset calculation becomes misaligned with the actual allocated buffer size, allowing the NIC hardware to write beyond the stats region. This is specific to GCP environments using Virtio-based networking with the gve driver.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.