Medium 5.5Published May 27, 2026

CVE-2026-45847net: remove WARN_ON_ONCE when accessing forward path array

Updated under an hour ago (Oct 26, 2026, 4:30 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE when accessing forward path array Although unlikely, recent support for IPIP tunnels increases chances of reaching this WARN_ON_ONCE if userspace manages to build a sufficiently long forward path. Remove it.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 27, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ddb94eafab8b597b05904c8277194ea2d6357fa9 before 548244c2f542aa0ad49453e9306e715a3877bc44; from ddb94eafab8b597b05904c8277194ea2d6357fa9 before dcf9b3c90e5560339649d088836529883fb509f3; from ddb94eafab8b597b05904c8277194ea2d6357fa9 before 9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6; from ddb94eafab8b597b05904c8277194ea2d6357fa9 before 959ea349c7e2d4edf07b6838ca7e59345fe61a08; from ddb94eafab8b597b05904c8277194ea2d6357fa9 before 50422613185d505201167e8bdd2f2700790d5db6; from ddb94eafab8b597b05904c8277194ea2d6357fa9 before a78d055ba7c31103ad02f8eceb0c452e154d2660; from ddb94eafab8b597b05904c8277194ea2d6357fa9 before 008e7a7c293b30bc43e4368dac6ea3808b75a572	CNA record
linux linux_kernel linux:linux_kernel	from 5.13 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.14; from 6.19 before 6.19.4	NVD

References

References

https://git.kernel.org/stable/c/548244c2f542aa0ad49453e9306e715a3877bc44	patch
https://git.kernel.org/stable/c/dcf9b3c90e5560339649d088836529883fb509f3	patch
https://git.kernel.org/stable/c/9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6	patch
https://git.kernel.org/stable/c/959ea349c7e2d4edf07b6838ca7e59345fe61a08	patch
https://git.kernel.org/stable/c/50422613185d505201167e8bdd2f2700790d5db6	patch
https://git.kernel.org/stable/c/a78d055ba7c31103ad02f8eceb0c452e154d2660	patch
https://git.kernel.org/stable/c/008e7a7c293b30bc43e4368dac6ea3808b75a572	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.