CVE-2026-23459

kernel: ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 3, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's IP tunnel (ip_tunnel) functionality. Incorrect handling of tunnel statistics, specifically within the iptunnel_xmit_stats() function, could lead to a mismatch in how data is processed. On 32-bit kernel systems, this issue may result in data corruption or system freezes, effectively causing a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-821 · Incorrect Synchronization