CVE-2026-23126 netdevsim: fix a race issue related to the operation on bpf_bound_progs list

🗓️ 14 Feb 2026 15:09:55Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Netdevsim fixes a race on the bpf_bound_progs list between create and destroy to prevent list corruption.

Reporter	Title	Published	Views	Family All 55
ATTACKERKB	CVE-2026-23126	14 Feb 202615:09	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1455)	6 Mar 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1468)	6 Mar 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2026-2077)	6 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2102)	6 Jun 202600:00	–	nessus
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50160)	24 Mar 202600:00	–	nessus
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50232)	16 Apr 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0770	22 Feb 202600:00	–	nessus
Tenable Nessus	Ubuntu 22.04 LTS / 24.04 LTS : Linux kernel vulnerabilities (USN-8278-1)	20 May 202600:00	–	nessus
Tenable Nessus	Ubuntu 24.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8289-1)	21 May 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/3f560cfc7706029294132482fff5d1bc7884b70d
git	www.git.kernel.org/stable/c/68462ecc40ea8f780fb3c74ebfddd05506bb731b
git	www.git.kernel.org/stable/c/b97d5eedf4976cc94321243be83b39efe81a0e15
git	www.git.kernel.org/stable/c/d77379ca82efcb2fe563359cc795027d680410db
git	www.git.kernel.org/stable/c/f1f9cfd2f46a73b7de2982d01be822eac3a0efaa
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23126.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-23126
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

02 Apr 2026 13:12Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.14.7

EPSS0.00014