In the Linux kernel, the following vulnerability has been resolved:
macvlan: fix possible UAF in macvlanforwardsource()
Add RCU protection on (struct macvlansourceentry)->vlan.
Whenever macvlanhashdel_source() is called, we must clear entry->vlan pointer before RCU grace period starts.
This allows macvlanforwardsource() to skip over entries queued for freeing.
Note that macvlandev are already RCU protected, as they are embedded in a standard netdev (netdevpriv(ndev)).
https: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23001.json",
"cna_assigner": "Linux"
}