NetSight
IP …
high7.8

CVE-2026-23083

In the Linux kernel, the following vulnerability has been resolved: fou: Don't allow 0 for FOU_ATTR_IPPROTO.

Impact

In the Linux kernel, the following vulnerability has been resolved: fou: Don't allow 0 for FOU_ATTR_IPPROTO. fou_udp_recv() has the same problem mentioned in the previous patch. If FOU_ATTR_IPPROTO is set to 0, skb is not freed by fou_udp_recv() nor "resubmit"-ted in ip_protocol_deliver_rcu(). Let's forbid 0 for FOU_ATTR_IPPROTO.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.18 before 5.10.249
from 5.11 before 5.15.199
from 5.16 before 6.1.162
from 6.2 before 6.6.122
from 6.7 before 6.12.68
from 6.13 before 6.18.8

Weakness classification

CWE-20

References