AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-23048

UNKNOWN · CVSS N/A EPSS 0.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-02-04 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. It affects Linux.

CVE
CVE-2026-23048
Severity
UNKNOWN
CVSS
N/A
EPSS
0.14%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: udp: call skb_orphan() before skb_attempt_defer_free() Standard UDP receive path does not use skb->destructor. But skmsg layer does use it, since it calls skb_set_owner_sk_safe() from udp_read_skb(). This then triggers this warning in skb_attempt_defer_free(): DEBUG_NET_WARN_ON_ONCE(skb->destructor); We must call skb_orphan() to fix this issue.