CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap
bpf: Fix stack-out-of-bounds write in devmap
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.130.1-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Modify get_upper_ifindexes() to accept a max parameter and enforce the excluded_devices[1+MAX_NEST_DEV] bound; when the number of upper devices exceeds MAX_NEST_DEV (8), return -EOVERFLOW and abort the XDP redirect.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23359?
CVE-2026-23359 has been classified as a high severity vulnerability due to the potential for stack-out-of-bounds writes that can lead to system instability.
How do I fix CVE-2026-23359?
To fix CVE-2026-23359, upgrade to the latest patched version of the Linux kernel that addresses this vulnerability.
What are the potential impacts of CVE-2026-23359?
CVE-2026-23359 can lead to arbitrary code execution or crashes, affecting the normal operation of systems running the vulnerable Linux kernel.
Which versions of the Linux kernel are affected by CVE-2026-23359?
CVE-2026-23359 affects certain versions of the Linux kernel that utilize the devmap feature, necessitating an upgrade to mitigate the risk.
Is there a known exploit for CVE-2026-23359?
As of now, no specific exploits for CVE-2026-23359 have been publicly disclosed, but the nature of the vulnerability poses a significant risk.