In the Linux kernel, the following vulnerability has been resolved:

net: remove WARN_ON_ONCE when accessing forward path array

Although unlikely, recent support for IPIP tunnels increases chances of
reaching this WARN_ON_ONCE if userspace manages to build a sufficiently
long forward path.

Remove it.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
ddb94eafab8b597b05904c8277194ea2d6357fa9 affected < 548244c2f542aa0ad49453e9306e715a3877bc44
ddb94eafab8b597b05904c8277194ea2d6357fa9 affected < dcf9b3c90e5560339649d088836529883fb509f3
ddb94eafab8b597b05904c8277194ea2d6357fa9 affected < 9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6
ddb94eafab8b597b05904c8277194ea2d6357fa9 affected < 959ea349c7e2d4edf07b6838ca7e59345fe61a08
ddb94eafab8b597b05904c8277194ea2d6357fa9 affected < 50422613185d505201167e8bdd2f2700790d5db6
ddb94eafab8b597b05904c8277194ea2d6357fa9 affected < a78d055ba7c31103ad02f8eceb0c452e154d2660
ddb94eafab8b597b05904c8277194ea2d6357fa9 affected < 008e7a7c293b30bc43e4368dac6ea3808b75a572
Linux Linux affected
Version Status Constraints
5.13 affected —
0 unaffected < 5.13
5.15.202 unaffected ≤ 5.15.*
6.1.165 unaffected ≤ 6.1.*
6.6.128 unaffected ≤ 6.6.*
6.12.75 unaffected ≤ 6.12.*
6.18.14 unaffected ≤ 6.18.*
6.19.4 unaffected ≤ 6.19.*
7.0 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/008e7a7c293b30bc43e4368dac6ea3808b75a572 cve-icon cve-icon
https://git.kernel.org/stable/c/50422613185d505201167e8bdd2f2700790d5db6 cve-icon cve-icon
https://git.kernel.org/stable/c/548244c2f542aa0ad49453e9306e715a3877bc44 cve-icon cve-icon
https://git.kernel.org/stable/c/9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6 cve-icon cve-icon
https://git.kernel.org/stable/c/959ea349c7e2d4edf07b6838ca7e59345fe61a08 cve-icon cve-icon
https://git.kernel.org/stable/c/a78d055ba7c31103ad02f8eceb0c452e154d2660 cve-icon cve-icon
https://git.kernel.org/stable/c/dcf9b3c90e5560339649d088836529883fb509f3 cve-icon cve-icon
History

Wed, 27 May 2026 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE when accessing forward path array Although unlikely, recent support for IPIP tunnels increases chances of reaching this WARN_ON_ONCE if userspace manages to build a sufficiently long forward path. Remove it.
Title net: remove WARN_ON_ONCE when accessing forward path array
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-05-27T12:15:07.344Z

Reserved: 2026-05-13T15:03:33.078Z

Link: CVE-2026-45847

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-27T14:16:56.577

Modified: 2026-05-27T14:48:31.480

Link: CVE-2026-45847

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.