CVE-2026-23262 Details
Description
In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count change The driver and the NIC share a region in memory for stats reporting. The NIC calculates its offset into this region based on the total size of the stats region and the size of the NIC's stats. When the number of queues is changed, the driver's stats region is resized. If the queue count is increased, the NIC can write past the end of the allocated stats region, causing memory corruption. If the queue count is decreased, there is a gap between the driver and NIC stats, leading to incorrect stats reporting. This change fixes the issue by allocating stats region with maximum size, and the offset calculation for NIC stats is changed to match with the calculation of the NIC.
A vulnerability in the Linux kernel's Google GVE driver can lead to memory corruption and incorrect statistics reporting. This issue arises because the driver and the Network Interface Card (NIC) share a memory region for statistics reporting. When the number of queues changes, the driver's statistics region is resized. An increase in queue count can cause the NIC to write beyond the allocated memory, while a decrease creates a gap in statistics reporting. The vulnerability affects the Linux kernel stable tree, specifically in versions prior to the latest commit that addresses this issue.
The vulnerability has been addressed in the Linux kernel stable tree. Users can upgrade to the latest version to apply the fix.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/11f8311f69e4c361717371b4901ff92daeb76e9c | kernel.org | Patch |
| https://git.kernel.org/stable/c/7b9ebcce0296e104a0d82a6b09d68564806158ff | kernel.org | Patch |
| https://git.kernel.org/stable/c/837c662f47dac43efa1aef2dd433c6b4b4c073af | kernel.org | Patch |
| https://git.kernel.org/stable/c/9d93332397405b62a3300b22d04ac65d990b91ff | kernel.org | Patch |
| https://git.kernel.org/stable/c/9fa0a755db3e1945fe00f73fe27d85ef6c8818b7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/df54838ab61826ecc1a562ffa5e280c3ab7289a7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f432f7613c220db32c2c6942420daf7b3f2e7d7e | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.10, < 5.10.250 >= 5.11, < 5.15.200 >= 5.16, < 6.1.163 >= 6.2, < 6.6.124 >= 6.7, < 6.12.70 >= 6.13, < 6.18.10 6.19 rc1 6.19 rc2 6.19 rc3 6.19 rc4 6.19 rc5 6.19 rc6 6.19 rc7 6.19 rc8 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 22, 2026 | Initial Analysis | [email protected] |
| Mar 18, 2026 | New CVE Received | kernel.org |