CVE-2026-23154

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: fix segmentation of forwarding fraglist GRO

This patch enhances GSO segment handling by properly checking

the SKB_GSO_DODGY flag for frag_list GSO packets, addressing

low throughput issues observed when a station accesses IPv4

servers via hotspots with an IPv6-only upstream interface.

Specifically, it fixes a bug in GSO segmentation when forwarding

GRO packets containing a frag_list. The function skb_segment_list

cannot correctly process GRO skbs that have been converted by XLAT,

since XLAT only translates the header of the head skb. Consequently,

skbs in the frag_list may remain untranslated, resulting in protocol

inconsistencies and reduced throughput.

To address this, the patch explicitly sets the SKB_GSO_DODGY flag

for GSO packets in XLAT's IPv4/IPv6 protocol translation helpers

(bpf_skb_proto_4_to_6 and bpf_skb_proto_6_to_4). This marks GSO

packets as potentially modified after protocol translation. As a

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References