CVE-2026-23276: linux kernel from 2.6.35.9 (inclusive), before 2.6.36 (exclusive), from 2.6.37 (inclusive), before 6.12.78…

Affected technology

linux kernel · from 2.6.35.9 (inclusive), before 2.6.36 (exclusive)
linux

linux kernel · from 2.6.37 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.19 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.9 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

Linux · 745e20f1b626b1be4b100af5d4bf7b3439392f8f to before da5f0166cef3d4285ddbb1b638661263fc03ee92, 745e20f1b626b1be4b100af5d4bf7b3439392f8f to before 834c4f645726a25fd71ea50cdfb5c135f8f95d85, 745e20f1b626b1be4b100af5d4bf7b3439392f8f to before 8a57deeb256069f262957d8012418559ff66c385, 745e20f1b626b1be4b100af5d4bf7b3439392f8f to before b56b8d19bd05e2a8338385c770bc2b60590bc81e, 745e20f1b626b1be4b100af5d4bf7b3439392f8f to before 6f1a9140ecda3baba3d945b9a6155af4268aafc4, 3f266b04185de51d8e6446eb1fccec3b5e7ce575, 2.6.35.9 to before 2.6.36
Linux

Linux · 2.6.37
Linux

Component: Not specified by the source
File: include/linux/netdevice.h, include/net/ip6_tunnel.h, include/net/ip_tunnels.h, net/core/dev.h, net/ipv4/ip_tunnel_core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.