SB2026032564 - Out-of-bounds write in Linux kernel google gve driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026032564

SB2026032564 - Out-of-bounds write in Linux kernel google gve driver

Published: March 25, 2026

Security Bulletin ID SB2026032564
Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Out-of-bounds write (CVE-ID: CVE-2026-23386)

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a boundary error in the gve_tx_clean_pending_packets() function in the Google Virtual Ethernet (gve) driver when handling packet transmission cleanup in DQ-QPL mode. A local user can trigger improper buffer cleanup by causing the transmission path to fail, leading to out-of-bounds memory access and system crash.

The issue arises because the function incorrectly uses the RDA buffer cleanup path in QPL mode, resulting in accessing memory beyond the bounds of the dma array, which shares storage with tx_qpl_buf_ids. This can be triggered during normal operation under specific error conditions.


Remediation

Install update from vendor's website.

References