Vulnerability Report

CVE-2026-23001

Title: Possible UAF in Linux macvlan_forward_source()

Memory Corruption

Proof Of Concept

PoC Available for CVE-2026-23001

CWE Category NVD-CWE-noinfo

Published Date Jan 25, 2026

Modified Date Apr 27, 2026

Exploit Status Available

Score 7.8 CVSS v

Exploit Probability (EPSS)

0.19%

Vulnerability Summary

CVE-2026-23001: In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan. Whenever macvlan_hash_del_source() is called, we must clear entry->vlan pointer before RCU grace period starts. This allows macvlan_forward_source() to skip over entries queued for freeing. Note that macvlan_dev are already RCU protected, as they are embedded in a standard netdev (netdev_priv(ndev)). https: //lore.kernel.org/netdev/[email protected]/T/#u

Impacted Vendors

linux 1

ubuntu 1

Reference Links

https://git.kernel.org/stable/c/6dbead9c7677186f22b7981dd085a0feec1f038e https://git.kernel.org/stable/c/7470a7a63dc162f07c26dbf960e41ee1e248d80e https://git.kernel.org/stable/c/8518712a2ca952d6da2238c6f0a16b4ae5ea3f13

CVSS v3.1

Source Entity [email protected]

Severity HIGH

7.8

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

Source Entity 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Severity HIGH

7.8

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

UNCHANGED

RAW VECTOR CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2026-23001 Exploits & PoCs (Proof Of Concept)

GitHub https://github.com/George0Papasotiriou/CVE-2026-23001-Hugging-Face-Transformers-Model-Deserialization-Arbitrary-Code-via-Pickle-

View Code

April 27, 2026 MODIFIED