Skip to main content
View
Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).
Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 20, 2026

A stack overflow vulnerability exists in the Linux kernel's tunnel transmission functions (iptunnel_xmit and ip6tunnel_xmit) due to missing recursion limits when GRE tap interfaces operate as slaves in bonded devices with broadcast mode enabled. This allows local attackers or legitimate multicast/broadcast traffic to trigger infinite recursion between bond_xmit_broadcast() and tunnel transmission functions, causing kernel stack exhaustion and denial of service. The vulnerability affects multiple Linux kernel versions and has been resolved with the addition of IP_TUNNEL_RECURSION_LIMIT (4) to prevent excessive stack consumption during nested tunnel packet encapsulation.

Affected VersionsENISA

Linux patch: 7.0-rc4
Linux 745e20f1b626b1be4b100af5d4bf7b3439392f8f <b56b8d19bd05e2a8338385c770bc2b60590bc81e
Linux patch: 6.19.9
Linux patch: 0
Linux 2.6.37
Linux patch: 6.18.19
Linux 745e20f1b626b1be4b100af5d4bf7b3439392f8f <6f1a9140ecda3baba3d945b9a6155af4268aafc4
Linux 3f266b04185de51d8e6446eb1fccec3b5e7ce575
Linux 745e20f1b626b1be4b100af5d4bf7b3439392f8f <8a57deeb256069f262957d8012418559ff66c385

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check

Know when Linux Kernel gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Ubuntu MEDIUM

Lifecycle Timeline

2
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
CVE Published
Mar 20, 2026 - 08:08 nvd
N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

net: add xmit recursion limit to tunnel xmit functions

Tunnel xmit functions (iptunnel_xmit, ip6tunnel_xmit) lack their own recursion limit. When a bond device in broadcast mode has GRE tap interfaces as slaves, and those GRE tunnels route back through the bond, multicast/broadcast traffic triggers infinite recursion between bond_xmit_broadcast() and ip_tunnel_xmit()/ip6_tnl_xmit(), causing kernel stack overflow.

The existing XMIT_RECURSION_LIMIT (8) in the no-qdisc path is not sufficient because tunnel recursion involves route lookups and full IP output, consuming much more stack per level. Use a lower limit of 4 (IP_TUNNEL_RECURSION_LIMIT) to prevent overflow.

Add recursion detection using dev_xmit_recursion helpers directly in iptunnel_xmit() and ip6tunnel_xmit() to cover all IPv4/IPv6 tunnel paths including UDP encapsulated tunnels (VXLAN, Geneve, etc.).

Move dev_xmit_recursion helpers from net/core/dev.h to public header include/linux/netdevice.h so they can be used by tunnel code.

BUG: KASAN: stack-out-of-bounds in blake2s.constprop.0+0xe7/0x160 Write of size 32 at addr ffff88810033fed0 by task kworker/0:1/11 Workqueue: mld mld_ifc_work Call Trace: <TASK> __build_flow_key.constprop.0 (net/ipv4/route.c:515) ip_rt_update_pmtu (net/ipv4/route.c:1073) iptunnel_xmit (net/ipv4/ip_tunnel_core.c:84) ip_tunnel_xmit (net/ipv4/ip_tunnel.c:847) gre_tap_xmit (net/ipv4/ip_gre.c:779) dev_hard_start_xmit (net/core/dev.c:3887) sch_direct_xmit (net/sched/sch_generic.c:347) __dev_queue_xmit (net/core/dev.c:4802) bond_dev_queue_xmit (drivers/net/bonding/bond_main.c:312) bond_xmit_broadcast (drivers/net/bonding/bond_main.c:5279) bond_start_xmit (drivers/net/bonding/bond_main.c:5530) dev_hard_start_xmit (net/core/dev.c:3887) __dev_queue_xmit (net/core/dev.c:4841) ip_finish_output2 (net/ipv4/ip_output.c:237) ip_output (net/ipv4/ip_output.c:438) iptunnel_xmit (net/ipv4/ip_tunnel_core.c:86) gre_tap_xmit (net/ipv4/ip_gre.c:779) dev_hard_start_xmit (net/core/dev.c:3887) sch_direct_xmit (net/sched/sch_generic.c:347) __dev_queue_xmit (net/core/dev.c:4802) bond_dev_queue_xmit (drivers/net/bonding/bond_main.c:312) bond_xmit_broadcast (drivers/net/bonding/bond_main.c:5279) bond_start_xmit (drivers/net/bonding/bond_main.c:5530) dev_hard_start_xmit (net/core/dev.c:3887) __dev_queue_xmit (net/core/dev.c:4841) ip_finish_output2 (net/ipv4/ip_output.c:237) ip_output (net/ipv4/ip_output.c:438) iptunnel_xmit (net/ipv4/ip_tunnel_core.c:86) ip_tunnel_xmit (net/ipv4/ip_tunnel.c:847) gre_tap_xmit (net/ipv4/ip_gre.c:779) dev_hard_start_xmit (net/core/dev.c:3887) sch_direct_xmit (net/sched/sch_generic.c:347) __dev_queue_xmit (net/core/dev.c:4802) bond_dev_queue_xmit (drivers/net/bonding/bond_main.c:312) bond_xmit_broadcast (drivers/net/bonding/bond_main.c:5279) bond_start_xmit (drivers/net/bonding/bond_main.c:5530) dev_hard_start_xmit (net/core/dev.c:3887) __dev_queue_xmit (net/core/dev.c:4841) mld_sendpack mld_ifc_work process_one_work worker_thread </TASK>

Threat Intelligence Overview

EPSS Score
0.0%
Top 96% exploitable
Data Quality
5 sources
Confidence: Medium
EUVD CVE.org EPSS MSRC Vendor VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity Not scored yet
CISA KEV No
Public POC No
EPSS 0.0%
Patch available Yes
Active threat No
Deciding rule
No CVSS yet + weak signal (CWE or non-zero EPSS)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Stack-based Buffer Overflow HIGH

A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than it was allocated to hold.

Denial of Service MEDIUM

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

Related Vulnerabilities in Linux Kernel Network and Event Handling

View all 8
CVE-2026-23277 MEDIUM
5.5
CVE-2026-23271 HIGH
7.8
CVE-2026-23272 HIGH
7.8
CVE-2026-23274 HIGH
7.8
CVE-2026-23278 HIGH
7.8
CVE-2026-23273 HIGH
7.8
CVE-2026-23275 HIGH
7.8

More in Linux Kernel

View all
CVE-2022-0847 HIGH POC
7.8 Mar 10

Linux kernel contains a flaw known as 'Dirty Pipe' where improper pipe buffer flag initialization allows unprivileged lo
CVE-2015-1328 HIGH POC
7.8 Nov 28

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no
CVE-2017-7308 HIGH POC
7.8 Mar 29

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer
CVE-2017-16995 HIGH POC
7.8 Dec 27

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

CVE-2017-1000112 HIGH POC
7.0 Oct 05

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. Rated high severity (CVSS 7.0). Public ex
CVE-2015-8660 MEDIUM POC
6.7 Dec 28

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op
CVE-2012-0056 MEDIUM POC
6.9 Jan 27

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when
CVE-2014-0038 MEDIUM POC
6.9 Feb 06

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo
CVE-2016-8655 HIGH POC
7.8 Dec 08

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau
CVE-2016-0728 HIGH POC
7.8 Feb 08

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref
CVE-2017-0561 CRITICAL POC
9.8 Apr 07

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary
CVE-2016-10277 HIGH POC
7.8 May 12

An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

Ubuntu

Priority: Medium
linux
Release Status Version
trusty needs-triage -
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-hwe
Release Status Version
xenial needs-triage -
bionic ignored replaced by linux-hwe-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-5.8
Release Status Version
focal ignored superseded by linux-hwe-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
linux-hwe-5.11
Release Status Version
focal ignored superseded by linux-hwe-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
linux-hwe-5.13
Release Status Version
focal ignored superseded by linux-hwe-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
linux-hwe-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
linux-hwe-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
questing DNE -
upstream ignored superseded by linux-hwe-6.14
linux-hwe-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-hwe-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-hwe-edge
Release Status Version
xenial ignored superseded by linux-hwe
bionic ignored superseded by linux-hwe-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-lts-xenial
Release Status Version
trusty needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-kvm
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-aws
Release Status Version
trusty needs-triage -
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-aws-5.0
Release Status Version
bionic ignored superseded by linux-aws-5.3
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
linux-aws-5.3
Release Status Version
bionic ignored superseded by linux-aws-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
linux-aws-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-5.8
Release Status Version
focal ignored superseded by linux-aws-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
linux-aws-5.11
Release Status Version
focal ignored superseded by linux-aws-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
linux-aws-5.13
Release Status Version
focal ignored superseded by linux-aws-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
linux-aws-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
linux-aws-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-aws-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-aws-hwe
Release Status Version
xenial needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure
Release Status Version
trusty needs-triage -
xenial needs-triage -
bionic ignored superseded by linux-azure-5.3
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-azure-4.15
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-5.3
Release Status Version
bionic ignored superseded by linux-azure-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
linux-azure-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-5.8
Release Status Version
focal ignored superseded by linux-azure-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
linux-azure-5.11
Release Status Version
focal ignored superseded by linux-azure-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
linux-azure-5.13
Release Status Version
focal ignored superseded by linux-azure-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
linux-azure-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
linux-azure-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
questing DNE -
upstream ignored superseded by linux-azure-6.14
linux-azure-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-fde
Release Status Version
focal ignored superseded by linux-azure-fde-5.15
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-azure-fde-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
linux-azure-fde-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-fde-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-nvidia
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-bluefield
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-edge
Release Status Version
bionic ignored superseded by linux-azure-5.3
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
linux-fips
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-fips
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-fips
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-fips
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp
Release Status Version
xenial needs-triage -
bionic ignored superseded by linux-gcp-5.3
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-gcp-4.15
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-5.3
Release Status Version
bionic ignored superseded by linux-gcp-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
linux-gcp-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-5.8
Release Status Version
focal ignored superseded by linux-gcp-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
linux-gcp-5.11
Release Status Version
focal ignored superseded by linux-gcp-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
linux-gcp-5.13
Release Status Version
focal ignored superseded by linux-gcp-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
linux-gcp-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
linux-gcp-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
questing DNE -
upstream ignored superseded by linux-gcp-6.14
linux-gcp-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gcp-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gke
Release Status Version
focal ignored end of kernel support
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gke-4.15
Release Status Version
bionic ignored superseded by linux-gke-5.0
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
linux-gke-5.4
Release Status Version
bionic ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-gkeop
Release Status Version
focal ignored end of kernel support
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gkeop-5.4
Release Status Version
bionic ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-ibm
Release Status Version
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-ibm-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-ibm-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-ibm-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-intel-iotg
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-intel-iotg-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-iot
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-intel-iot-realtime
Release Status Version
jammy ignored superseded by Ubuntu Pro ppa version
noble DNE -
questing DNE -
upstream needs-triage -
linux-lowlatency
Release Status Version
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-lowlatency-hwe-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
linux-lowlatency-hwe-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
questing DNE -
upstream ignored replaced by linux-hwe-6.14
linux-nvidia
Release Status Version
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
linux-nvidia-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
questing DNE -
upstream ignored end of kernel support
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-nvidia-tegra
Release Status Version
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-nvidia-tegra-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-nvidia-tegra-igx
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-oracle-5.0
Release Status Version
bionic ignored superseded by linux-oracle-5.3
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
linux-oracle-5.3
Release Status Version
bionic ignored superseded by linux-oracle-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
linux-oracle-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle-5.8
Release Status Version
focal ignored superseded by linux-oracle-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
linux-oracle-5.11
Release Status Version
focal ignored superseded by linux-oracle-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
linux-oracle-5.13
Release Status Version
focal ignored superseded by linux-oracle-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
linux-oracle-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
linux-oracle-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-oracle-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-oem
Release Status Version
bionic ignored replaced by linux-hwe-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-oem-5.6
Release Status Version
focal ignored superseded by linux-oem-5.10
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
linux-oem-5.10
Release Status Version
focal ignored superseded by linux-oem-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
linux-oem-5.13
Release Status Version
focal ignored superseded by linux-oem-5.14
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
linux-oem-5.14
Release Status Version
focal ignored replaced by linux-hwe-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
questing DNE -
upstream ignored superseded by linux-oem-6.14
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
questing DNE -
upstream ignored superseded by linux-oem-6.14
linux-oem-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-oem-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-raspi
Release Status Version
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-raspi2
Release Status Version
focal ignored replaced by linux-raspi
jammy DNE -
noble DNE -
questing DNE -
upstream ignored replaced by linux-raspi
linux-raspi-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-raspi-realtime
Release Status Version
jammy DNE -
noble ignored superseded by Ubuntu Pro ppa version
questing DNE -
upstream needs-triage -
linux-realtime
Release Status Version
jammy ignored superseded by Ubuntu Pro ppa version
noble ignored superseded by Ubuntu Pro ppa version
questing needs-triage -
upstream needs-triage -
linux-realtime-6.8
Release Status Version
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-realtime-6.14
Release Status Version
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-riscv
Release Status Version
focal ignored superseded by linux-riscv-5.8
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
questing needs-triage -
upstream needs-triage -
linux-riscv-5.8
Release Status Version
focal ignored superseded by linux-riscv-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
linux-riscv-5.11
Release Status Version
focal ignored superseded by linux-riscv-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
linux-riscv-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
linux-riscv-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-riscv-6.14
Release Status Version
jammy DNE -
noble ignored superseded by linux-riscv-6.17
questing DNE -
upstream ignored superseded by linux-riscv-6.17
linux-riscv-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-xilinx
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-xilinx-zynqmp
Release Status Version
focal needs-triage -
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-realtime-6.17
Release Status Version
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -

Debian

linux
Release Status Fixed Version Urgency
bullseye vulnerable 5.10.223-1 -
bullseye (security) vulnerable 5.10.251-1 -
bookworm vulnerable 6.1.159-1 -
bookworm (security) vulnerable 6.1.164-1 -
trixie vulnerable 6.12.73-1 -
trixie (security) vulnerable 6.12.74-2 -
forky vulnerable 6.19.6-2 -
sid vulnerable 6.19.8-1 -
(unstable) fixed (unfixed) -

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-23276 ADVISORY https://ubuntu.com/security/notices/USN-8567-1 ADVISORY https://vuldb.com/?id.352024 REF https://git.kernel.org/stable/c/6f1a9140ecda3baba3d945b9a6155af4268aafc4 REF https://git.kernel.org/stable/c/834c4f645726a25fd71ea50cdfb5c135f8f95d85 REF https://git.kernel.org/stable/c/8a57deeb256069f262957d8012418559ff66c385 REF https://git.kernel.org/stable/c/b56b8d19bd05e2a8338385c770bc2b60590bc81e

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy