CVE-2026-23048 Details
Description
In the Linux kernel, the following vulnerability has been resolved: udp: call skb_orphan() before skb_attempt_defer_free() Standard UDP receive path does not use skb->destructor. But skmsg layer does use it, since it calls skb_set_owner_sk_safe() from udp_read_skb(). This then triggers this warning in skb_attempt_defer_free(): DEBUG_NET_WARN_ON_ONCE(skb->destructor); We must call skb_orphan() to fix this issue.
A vulnerability in the Linux kernel's UDP handling has been addressed. The issue arises because the standard UDP receive path does not utilize the skb->destructor, while the skmsg layer does. This discrepancy triggers a warning in the skb_attempt_defer_free function, indicating the need for intervention. The vulnerability has been resolved by ensuring that skb_orphan() is called before skb_attempt_defer_free(), thereby aligning the UDP receive path with the requirements of the skmsg layer.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Feb 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0c63d5683eae6a7b4d81382bcbecb2a19feff90d | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/e5c8eda39a9fc1547d1398d707aa06c1d080abdd | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Feb 4, 2026 | New CVE Received | kernel.org |