CVE-2026-45847

Source
https://cve.org/CVERecord?id=CVE-2026-45847
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-45847.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-45847
Downstream
Published
2026-05-27T12:15:07.344Z
Modified
2026-06-27T11:55:13.703227172Z
Summary
net: remove WARN_ON_ONCE when accessing forward path array
Details

In the Linux kernel, the following vulnerability has been resolved:

net: remove WARNONONCE when accessing forward path array

Although unlikely, recent support for IPIP tunnels increases chances of reaching this WARNONONCE if userspace manages to build a sufficiently long forward path.

Remove it.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45847.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ddb94eafab8b597b05904c8277194ea2d6357fa9
Fixed
548244c2f542aa0ad49453e9306e715a3877bc44
Fixed
dcf9b3c90e5560339649d088836529883fb509f3
Fixed
9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6
Fixed
959ea349c7e2d4edf07b6838ca7e59345fe61a08
Fixed
50422613185d505201167e8bdd2f2700790d5db6
Fixed
a78d055ba7c31103ad02f8eceb0c452e154d2660
Fixed
008e7a7c293b30bc43e4368dac6ea3808b75a572

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-45847.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.13.0
Fixed
5.15.202
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.165
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.128
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.75
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.14
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-45847.json"