cve 2026 23359

The Linux kernel’s CVE-2026-23359 is a classic example of how a small-looking bounds mistake in BPF devmap code can turn into a real memory-safety problem. The issue sits in get_upper_ifindexes(), where the kernel walks every upper device and writes interface indices into an array without...