{"id":"CVE-2026-45847","title":"net: remove WARN_ON_ONCE when accessing forward path array","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: remove WARN_ON_ONCE when accessing forward path array\n\nAlthough unlikely, recent support for IPIP tunnels increases chances of\nreaching this WARN_ON_ONCE if usersp…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 548244c2f542aa0ad49453e9306e715a3877bc44","Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < dcf9b3c90e5560339649d088836529883fb509f3","Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6","Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 959ea349c7e2d4edf07b6838ca7e59345fe61a08","Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 50422613185d505201167e8bdd2f2700790d5db6","Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < a78d055ba7c31103ad02f8eceb0c452e154d2660","Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 008e7a7c293b30bc43e4368dac6ea3808b75a572","Linux 5.13"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T15:42:17.288642Z"},"published":"2026-05-27","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:42:59.719Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-45847","references":[{"url":"https://git.kernel.org/stable/c/548244c2f542aa0ad49453e9306e715a3877bc44"},{"url":"https://git.kernel.org/stable/c/dcf9b3c90e5560339649d088836529883fb509f3"},{"url":"https://git.kernel.org/stable/c/9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6"},{"url":"https://git.kernel.org/stable/c/959ea349c7e2d4edf07b6838ca7e59345fe61a08"},{"url":"https://git.kernel.org/stable/c/50422613185d505201167e8bdd2f2700790d5db6"},{"url":"https://git.kernel.org/stable/c/a78d055ba7c31103ad02f8eceb0c452e154d2660"},{"url":"https://git.kernel.org/stable/c/008e7a7c293b30bc43e4368dac6ea3808b75a572"}],"tags":["cve.org"],"epss":0.0016,"epssPercentile":0.05256,"ingestedAt":"2026-11-06T15:54:03.876Z","slug":"CVE-2026-45847","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: remove WARN_ON_ONCE when accessing forward path array\n\nAlthough unlikely, recent support for IPIP tunnels increases chances of\nreaching this WARN_ON_ONCE if userspace manages to build a sufficiently\nlong forward path.\n\nRemove it.\n\n## Affected\n\n- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 548244c2f542aa0ad49453e9306e715a3877bc44`\n- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < dcf9b3c90e5560339649d088836529883fb509f3`\n- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6`\n- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 959ea349c7e2d4edf07b6838ca7e59345fe61a08`\n- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 50422613185d505201167e8bdd2f2700790d5db6`\n- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < a78d055ba7c31103ad02f8eceb0c452e154d2660`\n- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 008e7a7c293b30bc43e4368dac6ea3808b75a572`\n- `Linux 5.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}