CVE-2026-45847

Published: May 27, 2026Modified: Jun 25, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE when accessing forward path array Although unlikely, recent support for IPIP tunnels increases chances of reaching this WARN_ON_ONCE if userspace manages to build a sufficiently long forward path. Remove it.

Affected (6)

Products: Linux: Linux Kernel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 5.13 to 5.15.202
Linux Linux Kernel	From 5.16 to 6.1.165
Linux Linux Kernel	From 6.13 to 6.18.14
Linux Linux Kernel	From 6.19 to 6.19.4
Linux Linux Kernel	From 6.2 to 6.6.128
Linux Linux Kernel	From 6.7 to 6.12.75

Related CWEs

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (7)

https://git.kernel.org/stable/c/008e7a7c293b30bc43e4368dac6ea3808b75a572

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/50422613185d505201167e8bdd2f2700790d5db6

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/548244c2f542aa0ad49453e9306e715a3877bc44

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/959ea349c7e2d4edf07b6838ca7e59345fe61a08

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/a78d055ba7c31103ad02f8eceb0c452e154d2660

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

https://git.kernel.org/stable/c/dcf9b3c90e5560339649d088836529883fb509f3

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Patch

Timeline

No history available yet.