[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-23273":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":22,"downstream":23,"duplicates":54,"related":55,"reserved_at":9,"published_at":56,"modified_at":57,"state":58,"summary":59,"references_raw":68,"kevs":103,"epss":104,"epss_history":107,"metrics":330,"affected":338},"CVE-2026-23273","In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: observe an RCU grace period in macvlan_common_newlink() error path\n\nvalis reported that a race condition still happens after my prior patch.\n\nmacvlan_common_newlink() might have made @dev visible before\ndetecting an error, and its caller will directly call free_netdev(dev).\n\nWe must respect an RCU period, either in macvlan or the core networking\nstack.\n\nAfter adding a temporary mdelay(1000) in macvlan_forward_source_one()\nto open the race window, valis repro was:\n\nip link add p1 type veth peer p2\nip link set address 00:00:00:00:00:20 dev p1\nip link set up dev p1\nip link set up dev p2\nip link add mv0 link p2 type macvlan mode source\n\n(ip link add invalid% link p2 type macvlan mode source macaddr add\n00:00:00:00:00:20 &) ; sleep 0.5 ; ping -c1 -I p1 1.2.3.4\nPING 1.2.3.4 (1.2.3.4): 56 data bytes\nRTNETLINK answers: Invalid argument\n\nBUG: KASAN: slab-use-after-free in macvlan_forward_source\n(drivers/net/macvlan.c:408 drivers/net/macvlan.c:444)\nRead of size 8 at addr ffff888016bb89c0 by task e/175\n\nCPU: 1 UID: 1000 PID: 175 Comm: e Not tainted 6.19.0-rc8+ #33 NONE\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-2 04/01/2014\nCall Trace:\n\u003CIRQ>\ndump_stack_lvl (lib/dump_stack.c:123)\nprint_report (mm/kasan/report.c:379 mm/kasan/report.c:482)\n? macvlan_forward_source (drivers/net/macvlan.c:408 drivers/net/macvlan.c:444)\nkasan_report (mm/kasan/report.c:597)\n? macvlan_forward_source (drivers/net/macvlan.c:408 drivers/net/macvlan.c:444)\nmacvlan_forward_source (drivers/net/macvlan.c:408 drivers/net/macvlan.c:444)\n? tasklet_init (kernel/softirq.c:983)\nmacvlan_handle_frame (drivers/net/macvlan.c:501)\n\nAllocated by task 169:\nkasan_save_stack (mm/kasan/common.c:58)\nkasan_save_track (./arch/x86/include/asm/current.h:25\nmm/kasan/common.c:70 mm/kasan/common.c:79)\n__kasan_kmalloc (mm/kasan/common.c:419)\n__kvmalloc_node_noprof (./include/linux/kasan.h:263 mm/slub.c:5657\nmm/slub.c:7140)\nalloc_netdev_mqs (net/core/dev.c:12012)\nrtnl_create_link (net/core/rtnetlink.c:3648)\nrtnl_newlink (net/core/rtnetlink.c:3830 net/core/rtnetlink.c:3957\nnet/core/rtnetlink.c:4072)\nrtnetlink_rcv_msg (net/core/rtnetlink.c:6958)\nnetlink_rcv_skb (net/netlink/af_netlink.c:2550)\nnetlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344)\nnetlink_sendmsg (net/netlink/af_netlink.c:1894)\n__sys_sendto (net/socket.c:727 net/socket.c:742 net/socket.c:2206)\n__x64_sys_sendto (net/socket.c:2209)\ndo_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\nentry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131)\n\nFreed by task 169:\nkasan_save_stack (mm/kasan/common.c:58)\nkasan_save_track (./arch/x86/include/asm/current.h:25\nmm/kasan/common.c:70 mm/kasan/common.c:79)\nkasan_save_free_info (mm/kasan/generic.c:587)\n__kasan_slab_free (mm/kasan/common.c:287)\nkfree (mm/slub.c:6674 mm/slub.c:6882)\nrtnl_newlink (net/core/rtnetlink.c:3845 net/core/rtnetlink.c:3957\nnet/core/rtnetlink.c:4072)\nrtnetlink_rcv_msg (net/core/rtnetlink.c:6958)\nnetlink_rcv_skb (net/netlink/af_netlink.c:2550)\nnetlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344)\nnetlink_sendmsg (net/netlink/af_netlink.c:1894)\n__sys_sendto (net/socket.c:727 net/socket.c:742 net/socket.c:2206)\n__x64_sys_sendto (net/socket.c:2209)\ndo_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)\nentry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:131)",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","weakness","Stable","Variant","High",[],[],[],[],[24,26,28,30,32,34,36,38,40,42,44,46,48,50,52],{"_key":25},"MGASA-2026-0097",{"_key":27},"MGASA-2026-0098",{"_key":29},"USN-8244-1",{"_key":31},"USN-8254-1",{"_key":33},"USN-8255-1",{"_key":35},"USN-8254-2",{"_key":37},"USN-8255-2",{"_key":39},"USN-8254-3",{"_key":41},"USN-8255-3",{"_key":43},"USN-8275-1",{"_key":45},"DEBIAN-CVE-2026-23273",{"_key":47},"UBUNTU-CVE-2026-23273",{"_key":49},"USN-8257-1",{"_key":51},"USN-8260-1",{"_key":53},"USN-8261-1",[],[],"2026-03-20T08:08:54.111Z","2026-05-23T16:04:27.068Z","Analyzed",{"cisa_kev":60,"cisa_ransomware":60,"cisa_vendor":9,"epss_severity":61,"epss_score":62,"severity":63,"severity_score":64,"severity_version":65,"severity_source":66,"severity_vector":67,"severity_status":58},false,"low",0.00022,"high",7.8,"v3.1","cve.org","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[69,75,79,83,87,91,95,99],{"url":70,"sources":71,"tags":73},"https://git.kernel.org/stable/c/91e4ff8d966978901630fc29582c1a76d3c6e46c",[66,72],"nvd",[74],"Patch",{"url":76,"sources":77,"tags":78},"https://git.kernel.org/stable/c/3d94323c80d7fc4da5f10f9bb06a45d39d5d3cc4",[66,72],[74],{"url":80,"sources":81,"tags":82},"https://git.kernel.org/stable/c/721eb342d9ba19bad5c4815ea3921465158b7362",[66,72],[74],{"url":84,"sources":85,"tags":86},"https://git.kernel.org/stable/c/19c7d8ac51988d053709c1e85bd8482076af845d",[66,72],[74],{"url":88,"sources":89,"tags":90},"https://git.kernel.org/stable/c/a1f686d273d129b45712d95f4095843b864466bd",[66,72],[74],{"url":92,"sources":93,"tags":94},"https://git.kernel.org/stable/c/d34f7a8aa9a25b7e64e0e46e444697c0f702374d",[66,72],[74],{"url":96,"sources":97,"tags":98},"https://git.kernel.org/stable/c/1e58ae87ad1e6e24368dea9aec9048c758cd0e2b",[66,72],[74],{"url":100,"sources":101,"tags":102},"https://git.kernel.org/stable/c/e3f000f0dee1bfab52e2e61ca6a3835d9e187e35",[66,72],[74],[],{"date":105,"score":62,"percentile":106},"2026-06-03",0.06308,[108,112,115,118,121,124,127,131,134,137,140,143,146,149,152,156,158,161,163,165,168,171,173,176,179,182,185,188,190,192,195,198,201,205,208,211,214,217,220,223,226,229,232,235,238,241,243,245,248,251,253,256,259,262,265,268,271,274,277,280,283,286,289,292,295,298,301,304,307,311,314,317,320,323,326,329],{"date":109,"score":110,"percentile":111},"2026-03-20",0.00024,0.06274,{"date":113,"score":110,"percentile":114},"2026-03-21",0.06492,{"date":116,"score":110,"percentile":117},"2026-03-22",0.06488,{"date":119,"score":110,"percentile":120},"2026-03-23",0.0646,{"date":122,"score":110,"percentile":123},"2026-03-24",0.06451,{"date":125,"score":110,"percentile":126},"2026-03-25",0.06525,{"date":128,"score":129,"percentile":130},"2026-03-26",0.00032,0.09239,{"date":132,"score":129,"percentile":133},"2026-03-27",0.09249,{"date":135,"score":129,"percentile":136},"2026-03-28",0.09267,{"date":138,"score":129,"percentile":139},"2026-03-29",0.09235,{"date":141,"score":129,"percentile":142},"2026-03-30",0.09209,{"date":144,"score":129,"percentile":145},"2026-03-31",0.09181,{"date":147,"score":129,"percentile":148},"2026-04-01",0.09174,{"date":150,"score":129,"percentile":151},"2026-04-02",0.09178,{"date":153,"score":154,"percentile":155},"2026-04-03",0.00013,0.02324,{"date":157,"score":154,"percentile":155},"2026-04-04",{"date":159,"score":154,"percentile":160},"2026-04-05",0.0232,{"date":162,"score":154,"percentile":160},"2026-04-06",{"date":164,"score":154,"percentile":160},"2026-04-07",{"date":166,"score":154,"percentile":167},"2026-04-08",0.02323,{"date":169,"score":154,"percentile":170},"2026-04-09",0.02344,{"date":172,"score":154,"percentile":170},"2026-04-10",{"date":174,"score":154,"percentile":175},"2026-04-11",0.02327,{"date":177,"score":154,"percentile":178},"2026-04-12",0.02313,{"date":180,"score":154,"percentile":181},"2026-04-13",0.02311,{"date":183,"score":154,"percentile":184},"2026-04-14",0.02295,{"date":186,"score":154,"percentile":187},"2026-04-15",0.02286,{"date":189,"score":154,"percentile":184},"2026-04-16",{"date":191,"score":154,"percentile":184},"2026-04-17",{"date":193,"score":154,"percentile":194},"2026-04-18",0.02301,{"date":196,"score":154,"percentile":197},"2026-04-19",0.02287,{"date":199,"score":154,"percentile":200},"2026-04-20",0.0227,{"date":202,"score":203,"percentile":204},"2026-04-21",0.00015,0.03414,{"date":206,"score":203,"percentile":207},"2026-04-22",0.03425,{"date":209,"score":203,"percentile":210},"2026-04-23",0.03423,{"date":212,"score":203,"percentile":213},"2026-04-24",0.034,{"date":215,"score":203,"percentile":216},"2026-04-25",0.03412,{"date":218,"score":203,"percentile":219},"2026-04-26",0.03406,{"date":221,"score":203,"percentile":222},"2026-04-27",0.0339,{"date":224,"score":203,"percentile":225},"2026-04-28",0.03431,{"date":227,"score":203,"percentile":228},"2026-04-29",0.0345,{"date":230,"score":203,"percentile":231},"2026-04-30",0.03442,{"date":233,"score":203,"percentile":234},"2026-05-01",0.03441,{"date":236,"score":203,"percentile":237},"2026-05-02",0.03428,{"date":239,"score":203,"percentile":240},"2026-05-03",0.03417,{"date":242,"score":203,"percentile":204},"2026-05-04",{"date":244,"score":203,"percentile":216},"2026-05-05",{"date":246,"score":203,"percentile":247},"2026-05-06",0.03408,{"date":249,"score":203,"percentile":250},"2026-05-07",0.03429,{"date":252,"score":203,"percentile":234},"2026-05-08",{"date":254,"score":203,"percentile":255},"2026-05-09",0.03466,{"date":257,"score":203,"percentile":258},"2026-05-10",0.0348,{"date":260,"score":203,"percentile":261},"2026-05-11",0.0347,{"date":263,"score":203,"percentile":264},"2026-05-12",0.03477,{"date":266,"score":203,"percentile":267},"2026-05-13",0.035,{"date":269,"score":203,"percentile":270},"2026-05-14",0.03512,{"date":272,"score":203,"percentile":273},"2026-05-15",0.0353,{"date":275,"score":203,"percentile":276},"2026-05-16",0.03539,{"date":278,"score":203,"percentile":279},"2026-05-17",0.03538,{"date":281,"score":203,"percentile":282},"2026-05-18",0.0351,{"date":284,"score":203,"percentile":285},"2026-05-19",0.03504,{"date":287,"score":203,"percentile":288},"2026-05-20",0.03507,{"date":290,"score":203,"percentile":291},"2026-05-21",0.03505,{"date":293,"score":203,"percentile":294},"2026-05-22",0.03681,{"date":296,"score":203,"percentile":297},"2026-05-23",0.03668,{"date":299,"score":203,"percentile":300},"2026-05-24",0.03659,{"date":302,"score":203,"percentile":303},"2026-05-25",0.03632,{"date":305,"score":203,"percentile":306},"2026-05-26",0.0362,{"date":308,"score":309,"percentile":310},"2026-05-27",0.00018,0.04977,{"date":312,"score":309,"percentile":313},"2026-05-28",0.04994,{"date":315,"score":309,"percentile":316},"2026-05-29",0.05006,{"date":318,"score":309,"percentile":319},"2026-05-30",0.05019,{"date":321,"score":309,"percentile":322},"2026-05-31",0.05,{"date":324,"score":309,"percentile":325},"2026-06-01",0.04939,{"date":327,"score":309,"percentile":328},"2026-06-02",0.04898,{"date":105,"score":62,"percentile":106},[331,336],{"source":66,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":332,"cvss_v4_0":9},{"baseScore":64,"baseSeverity":333,"vectorString":67,"impactScore":334,"exploitabilityScore":335},"HIGH",9.8,4.6,{"source":72,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":337,"cvss_v4_0":9},{"baseScore":64,"baseSeverity":333,"vectorString":67,"impactScore":334,"exploitabilityScore":335},[339,404],{"ecosystem":9,"name":340,"vendor":341,"product":341,"cpe_part":342,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":343},"Linux","linux","a",[344,351,355,359,363,367,371,375,378,382,386,390,394,398,402],{"version":345,"is_range":346,"range_type":66,"version_start":347,"version_start_type":348,"version_end":349,"version_end_type":350,"fixed_in":9},">= da5c6b8ae47e414be47e5e04def15b25d5c962dc, \u003C 91e4ff8d966978901630fc29582c1a76d3c6e46c",true,"da5c6b8ae47e414be47e5e04def15b25d5c962dc","including","91e4ff8d966978901630fc29582c1a76d3c6e46c","excluding",{"version":352,"is_range":346,"range_type":66,"version_start":353,"version_start_type":348,"version_end":354,"version_end_type":350,"fixed_in":9},">= 5dae6b36a7cb7a4fcf4121b95e9ca7f96f816c8a, \u003C 3d94323c80d7fc4da5f10f9bb06a45d39d5d3cc4","5dae6b36a7cb7a4fcf4121b95e9ca7f96f816c8a","3d94323c80d7fc4da5f10f9bb06a45d39d5d3cc4",{"version":356,"is_range":346,"range_type":66,"version_start":357,"version_start_type":348,"version_end":358,"version_end_type":350,"fixed_in":9},">= c43d0e787cbba569ec9d11579ed370b50fab6c9c, \u003C 721eb342d9ba19bad5c4815ea3921465158b7362","c43d0e787cbba569ec9d11579ed370b50fab6c9c","721eb342d9ba19bad5c4815ea3921465158b7362",{"version":360,"is_range":346,"range_type":66,"version_start":361,"version_start_type":348,"version_end":362,"version_end_type":350,"fixed_in":9},">= 11ba9f0dc865136174cb98834280fb21bbc950c7, \u003C 19c7d8ac51988d053709c1e85bd8482076af845d","11ba9f0dc865136174cb98834280fb21bbc950c7","19c7d8ac51988d053709c1e85bd8482076af845d",{"version":364,"is_range":346,"range_type":66,"version_start":365,"version_start_type":348,"version_end":366,"version_end_type":350,"fixed_in":9},">= 986967a162142710076782d5b93daab93a892980, \u003C a1f686d273d129b45712d95f4095843b864466bd","986967a162142710076782d5b93daab93a892980","a1f686d273d129b45712d95f4095843b864466bd",{"version":368,"is_range":346,"range_type":66,"version_start":369,"version_start_type":348,"version_end":370,"version_end_type":350,"fixed_in":9},">= cdedcd5aa3f3cb8b7ae0f87ab3a936d0bd583d66, \u003C d34f7a8aa9a25b7e64e0e46e444697c0f702374d","cdedcd5aa3f3cb8b7ae0f87ab3a936d0bd583d66","d34f7a8aa9a25b7e64e0e46e444697c0f702374d",{"version":372,"is_range":346,"range_type":66,"version_start":373,"version_start_type":348,"version_end":374,"version_end_type":350,"fixed_in":9},">= f8db6475a83649689c087a8f52486fcc53e627e9, \u003C 1e58ae87ad1e6e24368dea9aec9048c758cd0e2b","f8db6475a83649689c087a8f52486fcc53e627e9","1e58ae87ad1e6e24368dea9aec9048c758cd0e2b",{"version":376,"is_range":346,"range_type":66,"version_start":373,"version_start_type":348,"version_end":377,"version_end_type":350,"fixed_in":9},">= f8db6475a83649689c087a8f52486fcc53e627e9, \u003C e3f000f0dee1bfab52e2e61ca6a3835d9e187e35","e3f000f0dee1bfab52e2e61ca6a3835d9e187e35",{"version":379,"is_range":346,"range_type":66,"version_start":380,"version_start_type":348,"version_end":381,"version_end_type":350,"fixed_in":9},">= 5.10.250, \u003C 5.10.252","5.10.250","5.10.252",{"version":383,"is_range":346,"range_type":66,"version_start":384,"version_start_type":348,"version_end":385,"version_end_type":350,"fixed_in":9},">= 5.15.200, \u003C 5.15.202","5.15.200","5.15.202",{"version":387,"is_range":346,"range_type":66,"version_start":388,"version_start_type":348,"version_end":389,"version_end_type":350,"fixed_in":9},">= 6.1.163, \u003C 6.1.165","6.1.163","6.1.165",{"version":391,"is_range":346,"range_type":66,"version_start":392,"version_start_type":348,"version_end":393,"version_end_type":350,"fixed_in":9},">= 6.6.124, \u003C 6.6.128","6.6.124","6.6.128",{"version":395,"is_range":346,"range_type":66,"version_start":396,"version_start_type":348,"version_end":397,"version_end_type":350,"fixed_in":9},">= 6.12.70, \u003C 6.12.75","6.12.70","6.12.75",{"version":399,"is_range":346,"range_type":66,"version_start":400,"version_start_type":348,"version_end":401,"version_end_type":350,"fixed_in":9},">= 6.18.10, \u003C 6.18.14","6.18.10","6.18.14",{"version":403,"is_range":60,"range_type":66,"version_start":403,"version_start_type":348,"version_end":403,"version_end_type":348,"fixed_in":9},"6.19",{"ecosystem":9,"name":405,"vendor":341,"product":406,"cpe_part":407,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":408},"linux kernel","linux_kernel","o",[409,412,414,416,418,420,422],{"version":410,"is_range":346,"range_type":411,"version_start":380,"version_start_type":348,"version_end":381,"version_end_type":350,"fixed_in":9},"gte5.10.250_lt5.10.252","cpe",{"version":413,"is_range":346,"range_type":411,"version_start":384,"version_start_type":348,"version_end":385,"version_end_type":350,"fixed_in":9},"gte5.15.200_lt5.15.202",{"version":415,"is_range":346,"range_type":411,"version_start":388,"version_start_type":348,"version_end":389,"version_end_type":350,"fixed_in":9},"gte6.1.163_lt6.1.165",{"version":417,"is_range":346,"range_type":411,"version_start":392,"version_start_type":348,"version_end":393,"version_end_type":350,"fixed_in":9},"gte6.6.124_lt6.6.128",{"version":419,"is_range":346,"range_type":411,"version_start":396,"version_start_type":348,"version_end":397,"version_end_type":350,"fixed_in":9},"gte6.12.70_lt6.12.75",{"version":421,"is_range":346,"range_type":411,"version_start":400,"version_start_type":348,"version_end":401,"version_end_type":350,"fixed_in":9},"gte6.18.10_lt6.18.14",{"version":423,"is_range":346,"range_type":411,"version_start":424,"version_start_type":348,"version_end":425,"version_end_type":350,"fixed_in":9},"gte6.19.1_lt6.19.4","6.19.1","6.19.4"]