---
id: CVE-2026-45847
title: 'net: remove WARN_ON_ONCE when accessing forward path array'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: remove WARN_ON_ONCE when accessing forward path array

  Although unlikely, recent support for IPIP tunnels increases chances of
  reaching this WARN_ON_ONCE if usersp…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 <
    548244c2f542aa0ad49453e9306e715a3877bc44
  - >-
    Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 <
    dcf9b3c90e5560339649d088836529883fb509f3
  - >-
    Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 <
    9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6
  - >-
    Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 <
    959ea349c7e2d4edf07b6838ca7e59345fe61a08
  - >-
    Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 <
    50422613185d505201167e8bdd2f2700790d5db6
  - >-
    Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 <
    a78d055ba7c31103ad02f8eceb0c452e154d2660
  - >-
    Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 <
    008e7a7c293b30bc43e4368dac6ea3808b75a572
  - Linux 5.13
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:42:17.288642Z'
published: '2026-05-27'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:42:59.719Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-45847'
references:
  - url: 'https://git.kernel.org/stable/c/548244c2f542aa0ad49453e9306e715a3877bc44'
  - url: 'https://git.kernel.org/stable/c/dcf9b3c90e5560339649d088836529883fb509f3'
  - url: 'https://git.kernel.org/stable/c/9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6'
  - url: 'https://git.kernel.org/stable/c/959ea349c7e2d4edf07b6838ca7e59345fe61a08'
  - url: 'https://git.kernel.org/stable/c/50422613185d505201167e8bdd2f2700790d5db6'
  - url: 'https://git.kernel.org/stable/c/a78d055ba7c31103ad02f8eceb0c452e154d2660'
  - url: 'https://git.kernel.org/stable/c/008e7a7c293b30bc43e4368dac6ea3808b75a572'
tags:
  - cve.org
epss: 0.0016
epssPercentile: 0.05256
ingestedAt: '2026-11-06T15:54:03.876Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: remove WARN_ON_ONCE when accessing forward path array

Although unlikely, recent support for IPIP tunnels increases chances of
reaching this WARN_ON_ONCE if userspace manages to build a sufficiently
long forward path.

Remove it.

## Affected

- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 548244c2f542aa0ad49453e9306e715a3877bc44`
- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < dcf9b3c90e5560339649d088836529883fb509f3`
- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 9464ca7a6e56ad1ebf48b2ad5c16871edfad10c6`
- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 959ea349c7e2d4edf07b6838ca7e59345fe61a08`
- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 50422613185d505201167e8bdd2f2700790d5db6`
- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < a78d055ba7c31103ad02f8eceb0c452e154d2660`
- `Linux >= ddb94eafab8b597b05904c8277194ea2d6357fa9 < 008e7a7c293b30bc43e4368dac6ea3808b75a572`
- `Linux 5.13`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.