CVE-2026-23386

A flaw was found in the Linux kernel, specifically within the gve network driver. When the driver operates in DQ-QPL (Data Queue - Queue Pair List) mode, the gve_tx_clean_pending_packets() function incorrectly processes buffer cleanup. This error can cause the system to attempt to unmap memory at incorrect locations and access memory outside of allocated bounds, potentially leading to system instability or a denial of service.

This flaw affects Google Cloud Platform virtual machines using the gve network driver in DQ-QPL mode. The buffer cleanup code incorrectly interprets QPL buffer IDs as DMA addresses and can access beyond array bounds. This triggers UBSAN warnings and potential memory corruption during driver reset or close operations. Specific to GCP environments with gve driver.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.