Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-23001— macvlan: fix possible UAF in macvlan_forward_source()

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于释放后重用问题，可能导致空指针取消引用。

CVSS 7.8 · High EPSS 0.21% · P10

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 16

VendorProduct Version RangeStatus
Linux Linux 79cf79abce71eb7dbc40e2f3121048ca5405cb47< 8133e85b8a3ec9f10d861e0002ec6037256e987e affected
79cf79abce71eb7dbc40e2f3121048ca5405cb47< 484919832e2db6ce1e8add92c469e5d459a516b5 affected
79cf79abce71eb7dbc40e2f3121048ca5405cb47< 232afc74a6dde0fe1830988e5827921f5ec9bb3f affected
79cf79abce71eb7dbc40e2f3121048ca5405cb47< 15f6faf36e162532bec5cc05eb3fc622108bf2ed affected
79cf79abce71eb7dbc40e2f3121048ca5405cb47< 8518712a2ca952d6da2238c6f0a16b4ae5ea3f13 affected
79cf79abce71eb7dbc40e2f3121048ca5405cb47< 6dbead9c7677186f22b7981dd085a0feec1f038e affected
79cf79abce71eb7dbc40e2f3121048ca5405cb47< 7470a7a63dc162f07c26dbf960e41ee1e248d80e affected
3.18 affected
… +8 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-23001

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
macvlan: fix possible UAF in macvlan_forward_source()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan. Whenever macvlan_hash_del_source() is called, we must clear entry->vlan pointer before RCU grace period starts. This allows macvlan_forward_source() to skip over entries queued for freeing. Note that macvlan_dev are already RCU protected, as they are embedded in a standard netdev (netdev_priv(ndev)). https: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于释放后重用问题，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 79cf79abce71eb7dbc40e2f3121048ca5405cb47 ~ 8133e85b8a3ec9f10d861e0002ec6037256e987e -
Linux Linux 3.18 -

II. Public POCs for CVE-2026-23001

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-23001

请登录查看更多情报信息。

Same Patch Batch · Linux · 2026-01-25 · 20 CVEs total

CVE-2026-23004 7.8 HIGH dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()
CVE-2025-71162 7.8 HIGH dmaengine: tegra-adma: Fix use-after-free
CVE-2026-22999 7.8 HIGH net/sched: sch_qfq: do not free existing class in qfq_change_class()
CVE-2026-23010 7.8 HIGH ipv6: Fix use-after-free in inet6_addr_del().
CVE-2026-23003 7.5 HIGH ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
CVE-2026-22998 7.5 HIGH nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
CVE-2026-22997 7.5 HIGH net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the
CVE-2026-23013 7.0 HIGH net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback
CVE-2026-23009 xhci: sideband: don't dereference freed ring when removing sideband endpoint
CVE-2026-23008 drm/vmwgfx: Fix KMS with 3D on HW version 10
CVE-2026-23007 block: zero non-PI portion of auto integrity buffer
CVE-2026-23006 ASoC: tlv320adcx140: fix null pointer
CVE-2026-23005 x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
CVE-2026-23002 lib/buildid: use __kernel_read() for sleepable context
CVE-2026-23000 net/mlx5e: Fix crash on profile change rollback failure
CVE-2026-23011 ipv4: ip_gre: make ipgre_header() robust
CVE-2026-22996 net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
CVE-2025-71163 dmaengine: idxd: fix device leaks on compat bind and unbind
CVE-2026-23012 mm/damon/core: remove call_control in inactive contexts

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-23001

No comments yet

Leave a comment