← Search the atlas
CVE-2026-23204
Not scored
net/sched: cls_u32: use skb_header_pointer_careful()
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_u32: use skb_header_pointer_careful()
skb_header_pointer() does not fully validate negative @offset values.
Use skb_header_pointer_careful() instead.
GangMin Kim provided a report and a repro fooling u32_classify():
BUG: KASAN: slab-out-of-bounds in u32_classify+0x1180/0x11b0
net/sched/cls_u32.c:221
Exploit probability
0.1%
Published
February 14, 2026
Required by
Not available
Last source change
July 16, 2026
02 / AFFECTED SOFTWARE
Affected packages
Linux
Kernel
Unknown
Unknown
03 / CONNECTIONS
Connected vulnerabilities
related
ALSA-2026:19568
related
ALSA-2026:6036
related
ALSA-2026:6037
related
ALSA-2026:6153
related
ALSA-2026:6632
related
OPENSUSE-SU-2026:20572-1
related
SUSE-SU-2026:0928-1
related
SUSE-SU-2026:0961-1
related
SUSE-SU-2026:0962-1
related
SUSE-SU-2026:0984-1
related
SUSE-SU-2026:1003-1
related
SUSE-SU-2026:1041-1
related
SUSE-SU-2026:1077-1
related
SUSE-SU-2026:1078-1
related
SUSE-SU-2026:1081-1
related
SUSE-SU-2026:1131-1
related
SUSE-SU-2026:1684-1
related
SUSE-SU-2026:1686-1
related
SUSE-SU-2026:1689-1
related
SUSE-SU-2026:1691-1
related
SUSE-SU-2026:1694-1
related
SUSE-SU-2026:1698-1
related
SUSE-SU-2026:1708-1
related
SUSE-SU-2026:1710-1
related
SUSE-SU-2026:1718-1
related
SUSE-SU-2026:1725-1
related
SUSE-SU-2026:1726-1
related
SUSE-SU-2026:1728-1
related
SUSE-SU-2026:1733-1
related
SUSE-SU-2026:1735-1
related
SUSE-SU-2026:1765-1
related
SUSE-SU-2026:1767-1
related
SUSE-SU-2026:1768-1
related
SUSE-SU-2026:1770-1
related
SUSE-SU-2026:1771-1
related
SUSE-SU-2026:1773-1
related
SUSE-SU-2026:1776-1
related
SUSE-SU-2026:1780-1
related
SUSE-SU-2026:1781-1
related
SUSE-SU-2026:1786-1
related
SUSE-SU-2026:1787-1
related
SUSE-SU-2026:1790-1
related
SUSE-SU-2026:1791-1
related
SUSE-SU-2026:1793-1
related
SUSE-SU-2026:1798-1
related
SUSE-SU-2026:1801-1
related
SUSE-SU-2026:1804-1
related
SUSE-SU-2026:21114-1
related
SUSE-SU-2026:21123-1
related
SUSE-SU-2026:21230-1
related
SUSE-SU-2026:21237-1
related
SUSE-SU-2026:21255-1
related
SUSE-SU-2026:21352-1
related
SUSE-SU-2026:21361-1
related
SUSE-SU-2026:21468-1
related
SUSE-SU-2026:21469-1
related
SUSE-SU-2026:21470-1
related
SUSE-SU-2026:21471-1
related
SUSE-SU-2026:21472-1
related
SUSE-SU-2026:21473-1
related
SUSE-SU-2026:21474-1
related
SUSE-SU-2026:21475-1
related
SUSE-SU-2026:21476-1
related
SUSE-SU-2026:21477-1
related
SUSE-SU-2026:21478-1
related
SUSE-SU-2026:21479-1
related
SUSE-SU-2026:21480-1
related
SUSE-SU-2026:21481-1
related
SUSE-SU-2026:21482-1
related
SUSE-SU-2026:21483-1
related
SUSE-SU-2026:21484-1
related
SUSE-SU-2026:21485-1
related
SUSE-SU-2026:21486-1
related
SUSE-SU-2026:21487-1
related
SUSE-SU-2026:21488-1
related
SUSE-SU-2026:21491-1
related
SUSE-SU-2026:21495-1
related
SUSE-SU-2026:21496-1
related
SUSE-SU-2026:21497-1
related
SUSE-SU-2026:21498-1
related
SUSE-SU-2026:21499-1
related
SUSE-SU-2026:21500-1
related
SUSE-SU-2026:21501-1
related
SUSE-SU-2026:21502-1
related
SUSE-SU-2026:21503-1
related
SUSE-SU-2026:21504-1
related
SUSE-SU-2026:21505-1
related
SUSE-SU-2026:21506-1
related
SUSE-SU-2026:21507-1
related
SUSE-SU-2026:21508-1
related
SUSE-SU-2026:21509-1
related
SUSE-SU-2026:21510-1
related
SUSE-SU-2026:21511-1
related
SUSE-SU-2026:21512-1
related
SUSE-SU-2026:21513-1
related
SUSE-SU-2026:21514-1
related
SUSE-SU-2026:21515-1
related
SUSE-SU-2026:21516-1
related
SUSE-SU-2026:21519-1
related
SUSE-SU-2026:21521-1
related
SUSE-SU-2026:21522-1
related
SUSE-SU-2026:21523-1
related
SUSE-SU-2026:21525-1
related
SUSE-SU-2026:21526-1
related
SUSE-SU-2026:21527-1
related
SUSE-SU-2026:21528-1
related
SUSE-SU-2026:21529-1
related
SUSE-SU-2026:21530-1
related
SUSE-SU-2026:21531-1
related
SUSE-SU-2026:21532-1
related
SUSE-SU-2026:21533-1
related
SUSE-SU-2026:21554-1
related
SUSE-SU-2026:21555-1
related
SUSE-SU-2026:21557-1
related
SUSE-SU-2026:21558-1
related
SUSE-SU-2026:21562-1
related
SUSE-SU-2026:21563-1
related
SUSE-SU-2026:21591-1
related
SUSE-SU-2026:21598-1
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2026-23204
In the Linux kernel, the following vulnerability has been resolved:
net/sched: cls_u32: use skb_header_pointer_careful()
skb_header_pointer() does not fully validate negative @offset values.
Use skb_header_pointer_careful() instead.
GangMin Kim provided a report and a repro fooling u32_classify():
BUG: KASAN: slab-out-of-bounds in u32_classify+0x1180/0x11b0
net/sched/cls_u32.c:221
View original source ↗
05 / REFERENCES
Further evidence