GSD-2023-1001016

bpf: make sure skb->len != 0 when redirecting to a tunneling device

No score

bpf: make sure skb->len != 0 when redirecting to a tunneling device

This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit 5d3f4478d22b2cb1810f6fe0f797411e9d87b3e5. For more details please see the references link.

What each source reports

OSV No score

bpf: make sure skb->len != 0 when redirecting to a tunneling device

bpf: make sure skb->len != 0 when redirecting to a tunneling device

Record: GSD-2023-1001016
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`Kernel` Linux	Listed versions, plus commit ranges v2.6.12v2.6.12-rc2v2.6.12-rc3v2.6.12-rc4v2.6.12-rc5 Show 45 moreShow less v2.6.12-rc6v2.6.13v2.6.13-rc1v2.6.13-rc2v2.6.13-rc3v2.6.13-rc4v2.6.13-rc5v2.6.13-rc6v2.6.13-rc7v2.6.14v2.6.14-rc1v2.6.14-rc2v2.6.14-rc3v2.6.14-rc4v2.6.14-rc5v2.6.15v2.6.15-rc1v2.6.15-rc2v2.6.15-rc3v2.6.15-rc4v2.6.15-rc5v2.6.15-rc6v2.6.15-rc7v2.6.16v2.6.16-rc1v2.6.16-rc2v2.6.16-rc3v2.6.16-rc4v2.6.16-rc5v2.6.16-rc6v2.6.17v2.6.17-rc1v2.6.17-rc2v2.6.17-rc3v2.6.17-rc4v2.6.17-rc5v2.6.17-rc6v2.6.18v2.6.18-rc1v2.6.18-rc2v2.6.18-rc3v2.6.18-rc4v2.6.18-rc5v2.6.18-rc6v2.6.18-rc7	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

GSD-2023-1001016 is a vulnerability with no CVSS score yet in Kernel, published January 17, 2023. No source lists public exploit code. No source names a fixed version.

This page doesn't list everything

Left out here: 752 versions. The JSON record has them.