CVE-2026-23143

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

virtio_net: Fix misalignment bug in struct virtnet_info

Use the new TRAILING_OVERLAP() helper to fix a misalignment bug

along with the following warning:

drivers/net/virtio_net.c:429:46: warning: structure containing a flexible array member is not at the end of another structure [-Wflex-array-member-not-at-end]

This helper creates a union between a flexible-array member (FAM)

and a set of members that would otherwise follow it (in this case

`u8 rss_hash_key_data[VIRTIO_NET_RSS_MAX_KEY_SIZE];`). This

overlays the trailing members (rss_hash_key_data) onto the FAM

(hash_key_data) while keeping the FAM and the start of MEMBERS aligned.

The static_assert() ensures this alignment remains.

Notice that due to tail padding in flexible `struct

virtio_net_rss_config_trailer`, `rss_trailer.hash_key_data`

(at offset 83 in struct virtnet_info) and `rss_hash_key_data` (at

offset 84 in struct virtnet_info) are misaligned by one b

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References