UDP Handling Issue in Linux Kernel from Vendor
CVE-2026-23254

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 18 March 2026

What is CVE-2026-23254?

A flaw in the UDP GRO (Generic Receive Offload) processing of the Linux kernel can lead to errors in packet checksum validation. The udp GRO complete stage incorrectly assumes that all packets have a zeroed encapsulation flag, which is not always true. Certain hardware network interface cards (NICs) and specific setups can set this flag when offloading checksums for UDP-encapsulated traffic. As a result, when the erroneous state occurs, the function udp4_gro_complete() computes the outer UDP header checksum using an incorrect network offset, leading to potential packet processing failures. The issue has been resolved by ensuring that the encapsulation flag is cleared correctly during the GRO completion stage.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch