CVE-2026-23154
- Source
- https://cve.org/CVERecord?id=CVE-2026-23154
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23154.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-23154
- Downstream
- Published
- 2026-02-14T16:01:21.758Z
- Modified
- 2026-02-14T20:15:28.829205Z
- Summary
- net: fix segmentation of forwarding fraglist GRO
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: fix segmentation of forwarding fraglist GRO
This patch enhances GSO segment handling by properly checking the SKBGSODODGY flag for frag_list GSO packets, addressing low throughput issues observed when a station accesses IPv4 servers via hotspots with an IPv6-only upstream interface.
Specifically, it fixes a bug in GSO segmentation when forwarding GRO packets containing a fraglist. The function skbsegmentlist cannot correctly process GRO skbs that have been converted by XLAT, since XLAT only translates the header of the head skb. Consequently, skbs in the fraglist may remain untranslated, resulting in protocol inconsistencies and reduced throughput.
To address this, the patch explicitly sets the SKBGSODODGY flag for GSO packets in XLAT's IPv4/IPv6 protocol translation helpers (bpfskbproto4to6 and bpfskbproto6to4). This marks GSO packets as potentially modified after protocol translation. As a result, GSO segmentation will avoid using skbsegmentlist and instead falls back to skbsegment for packets with the SKBGSODODGY flag. This ensures that only safe and fully translated fraglist packets are processed by skbsegmentlist, resolving protocol inconsistencies and improving throughput when forwarding GRO packets converted by XLAT.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23154.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/3d48d59235c494d34e32052f768393111c0806ef
- https://git.kernel.org/stable/c/3e62db1e3140449608975e29e0979cc5f3b1cc07
- https://git.kernel.org/stable/c/426ca15c7f6cb6562a081341ca88893a50c59fa2
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23154.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-23154
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced9fd1ff5d2ac7181844735806b0a703c942365291Fixed3e62db1e3140449608975e29e0979cc5f3b1cc07Fixed3d48d59235c494d34e32052f768393111c0806efFixed426ca15c7f6cb6562a081341ca88893a50c59fa2