Search/CVE-2026-23204
● CVE — High

CVE-2026-23204

VendorlinuxProductlinux kernelDiscoveredFeb 14, 2026UpdatedJul 14, 2026

In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: use skb_header_pointer_careful() skb_header_pointer() does not fully validate negative @offset values. Use skb_header_pointer_careful() instead. GangMin Kim provided a report and a repro fooling u32_classify(): BUG: KASAN: slab-out-of-bounds in u32_classify+0x1180/0x11b0 net/sched/cls_u32.c:221

View graph Watch Export
CVSS v3.1
7.1 HIGH
EPSS
0.15%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
19
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 26, 2026
▲ 0.03pp
0.12% → 0.15% over 5 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Connections
21 relationships
Timeline
disclosure → media coverage
Feb 14, 2026
Disclosure — published as a CVE record. · last revised by NVD Jul 14, 2026
May 19, 2026
ubuntu.com reports: USN-8278-1: Linux kernel vulnerabilities
May 20, 2026
ubuntu.com reports: USN-8289-1: Linux kernel (NVIDIA) vulnerabilities
May 22, 2026
ubuntu.com reports: USN-8296-1: Linux kernel (FIPS) vulnerabilities
May 25, 2026
ubuntu.com reports: USN-8296-2: Linux kernel (NVIDIA Tegra) vulnerabilities
May 26, 2026
ubuntu.com reports: USN-8278-2: Linux kernel (Azure) vulnerabilities
Jul 2, 2026
ubuntu.com reports: USN-8499-1: Linux kernel (Xilinx) vulnerabilities
Jul 21, 2026
ubuntu.com reports: USN-8575-1: Linux kernel vulnerabilities
Jul 21, 2026
ubuntu.com reports: USN-8576-1: Linux kernel (NVIDIA Tegra) vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8575-2: Linux kernel vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8576-2: Linux kernel (NVIDIA Tegra) vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8597-1: Linux kernel (IBM) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8575-3: Linux kernel vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8610-1: Linux kernel (Azure CVM) vulnerabilities
Jul 28, 2026
ubuntu.com reports: USN-8620-1: Linux kernel vulnerabilities
Jul 29, 2026
ubuntu.com reports: USN-8620-2: Linux kernel (Azure FIPS) vulnerabilities
Jul 31, 2026
ubuntu.com reports: USN-8620-3: Linux kernel (Intel IoTG) vulnerabilities
Jul 31, 2026
ubuntu.com reports: USN-8620-4: Linux kernel (Intel IoTG) vulnerabilities
Aug 21, 2026
ubuntu.com reports: USN-8668-1: Linux kernel (GCP) vulnerabilities
Sep 21, 2026
ubuntu.com reports: USN-8668-2: Linux kernel (Raspberry Pi) vulnerabilities