Riskcovery

CVE-2026-23083

fou: Don't allow 0 for FOU_ATTR_IPPROTO.

State
Published
Severity
Not scored
Published
Feb 4, 2026
Updated
Oct 19, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fou: Don't allow 0 for FOU_ATTR_IPPROTO.

fou_udp_recv() has the same problem mentioned in the previous patch.

If FOU_ATTR_IPPROTO is set to 0, skb is not freed by fou_udp_recv() nor "resubmit"-ted in ip_protocol_deliver_rcu().

Let's forbid 0 for FOU_ATTR_IPPROTO.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
LinuxLinux
  • 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before c7498f9bc390479ccfad7c7f2332237ff4945b03Affected
  • 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 611ef4bd9c73d9e6d87bed57a635ff1fdd8c91eaAffected
  • 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 6e983789b7588ee59cbf303583546c043bad8e19Affected
  • 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 1cc98b8887cabb1808d2f4a37cd10a7be7574771Affected
  • 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before b7db31a52c3862a1a32202a273a4c32e7f5f4823Affected
  • 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 9b75dff8446ec871030d8daf5a69e74f5fe8b956Affected
  • 23461551c00628c3f3fe9cf837bf53cf8f212b63 to before 7a9bc9e3f42391e4c187e099263cf7a1c4b69ff5Affected
LinuxLinux
  • 3.18Affected
  • before 3.18Not affected
  • 5.10.249 through 5.10.*Not affected
  • 5.15.199 through 5.15.*Not affected
  • 6.1.162 through 6.1.*Not affected
  • 6.6.122 through 6.6.*Not affected
  • 6.12.68 through 6.12.*Not affected
  • 6.18.8 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.