CVE-2026-45847: net: remove WARN_ON_ONCE when accessing forward path array
Published May 27, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
net: remove WARNONONCE when accessing forward path array
Although unlikely, recent support for IPIP tunnels increases chances of reaching this WARNONONCE if userspace manages to build a sufficiently long forward path.
Remove it.
Affected Software
7 affected components
Linux Foundation Linux Kernel
Linux Linux kernel>=5.13<5.15.202
Linux Linux kernel>=5.16<6.1.165
Linux Linux kernel>=6.2<6.6.128
Linux Linux kernel>=6.7<6.12.75
Linux Linux kernel>=6.13<6.18.14
Linux Linux kernel>=6.19<6.19.4
Event History
May 27, 2026
CVE Published
via MITRE·12:15 PM
Data Sourced
via MITRE·12:15 PM
Description
Data Sourced
via NVD·02:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-45847?
The severity of CVE-2026-45847 is rated as 5.
2
What are the potential risks associated with CVE-2026-45847?
CVE-2026-45847 could potentially lead to unexpected behavior when accessing the forward path array in the Linux kernel.
3
How do I fix CVE-2026-45847?
To fix CVE-2026-45847, ensure that your Linux kernel is updated to the latest patched version released after May 27, 2026.
4
Which software is affected by CVE-2026-45847?
CVE-2026-45847 affects the Linux Foundation Linux Kernel.
5
Has CVE-2026-45847 been resolved?
Yes, CVE-2026-45847 has been resolved by removing the WARN_ON_ONCE when accessing the forward path array.