AZL-77169
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-77169.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-77169
- Upstream
- Published
- 2026-01-25T15:15:54Z
- Modified
- 2026-08-28T17:47:51Z
- Summary
- CVE-2026-23001 affecting package kernel for versions less than 6.6.126.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
macvlan: fix possible UAF in macvlan_forward_source()
Add RCU protection on (struct macvlan_source_entry)->vlan.
Whenever macvlan_hash_del_source() is called, we must clear entry->vlan pointer before RCU grace period starts.
This allows macvlan_forward_source() to skip over entries queued for freeing.
Note that macvlan_dev are already RCU protected, as they are embedded in a standard netdev (netdev_priv(ndev)).
https: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u
- References