High 8.2Published Apr 3, 2026

CVE-2026-23459ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS

Updated under an hour ago (Oct 27, 2026, 8:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS Blamed commits forgot that vxlan/geneve use udp_tunnel[6]_xmit_skb() which call iptunnel_xmit_stats(). iptunnel_xmit_stats() was assuming tunnels were only using NETDEV_PCPU_STAT_TSTATS. @syncp offset in pcpu_sw_netstats and pcpu_dstats is different. 32bit kernels would either have corruptions or freezes if the syncp sequence was overwritten. This patch also moves pcpu_stat_type closer to dev->{t,d}stats to avoid a potential cache line miss since iptunnel_xmit_stats() needs to read it.

CVSS: 8.2 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1db9041e91ac574f1cecc0e98e69ac35832e8088 before 127c5e6e2d6fa8185314537c08204ec3515eae99; from cb1c1f3b7ef908408064734fb6bdaf5811b8b84c before e40e2d11ced8119d3e4469ebe91264bc1cf71530; from be226352e8dc77d3313c096b2d8e7f69bf6980fc before 5d562153b4719234227f99c2fb529f98a6a44d15; from be226352e8dc77d3313c096b2d8e7f69bf6980fc before 0d087d00161f562d5047cc4009bb0c6a19daf9f1; from be226352e8dc77d3313c096b2d8e7f69bf6980fc before 8431c602f551549f082bbfa67f3003f2d8e3e132; from 6.6.153 before 6.6.160	CNA record
linux linux_kernel linux:linux_kernel	from 6.14 before 6.19.10; 7.0; 7.0; 7.0; 7.0	NVD

References

References

https://git.kernel.org/stable/c/127c5e6e2d6fa8185314537c08204ec3515eae99
https://git.kernel.org/stable/c/e40e2d11ced8119d3e4469ebe91264bc1cf71530
https://git.kernel.org/stable/c/5d562153b4719234227f99c2fb529f98a6a44d15
https://git.kernel.org/stable/c/0d087d00161f562d5047cc4009bb0c6a19daf9f1	patch
https://git.kernel.org/stable/c/8431c602f551549f082bbfa67f3003f2d8e3e132	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.