CVE-2026-23378

A flaw was found in the Linux kernel, specifically within the networking scheduler's Ingress Forwarding Engine (IFE) action. When an IFE action attempts to replace metadata, it incorrectly appends new metadata instead of replacing the old. This unbounded addition of metadata can lead to an out-of-bounds memory write during the encoding operation. An attacker, by manipulating network traffic, could potentially trigger a denial of service or achieve arbitrary code execution within the kernel.