Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23048

udp: call skb_orphan() before skb_attempt_defer_free()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: udp: call skb_orphan() before skb_attempt_defer_free() Standard UDP receive path does not use skb->destructor. But skmsg layer does use it, since it calls skb_set_owner_sk_safe() from udp_read_skb(). This then triggers this warning in skb_attempt_defer_free(): DEBUG_NET_WARN_ON_ONCE(skb->destructor); We must call skb_orphan() to fix this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6471658dc66c670580a7616e75f51b52917e7883 to < 0c63d5683eae6a7b4d81382bcbecb2a19feff90daffected
  • 6471658dc66c670580a7616e75f51b52917e7883 to < e5c8eda39a9fc1547d1398d707aa06c1d080abddaffected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.18.6 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References