The Linux kernel vulnerability CVE-2026-22979 involves a memory leak in the skb_segment_list() function used during packet forwarding for GRO (Generic Receive Offload) packets. The issue stems from a change in socket memory ownership handling introduced by commit ed4cccef64c1, which orphaned fraglist entries (skb->sk = NULL) to prevent illegal orphaning. This change caused the socket memory charge to remain with the head SKB, but the skb_segment_list() function continued to subtract truesize from the parent SKB incorrectly, leading to a memory leak. This flaw was fixed by correcting the memory accounting logic in skb_segment_list(). The vulnerability affects multiple Linux kernel versions prior to 6.8.0-1057.60~22.04.1 and related builds. The fix is included in updated Ubuntu Linux kernel packages as part of a broader security update addressing multiple kernel issues.

The vulnerability causes a memory leak in the Linux kernel during packet forwarding, which can degrade system performance or stability due to resource exhaustion. The CVSS score of 5.5 indicates a medium severity impact with no confidentiality or integrity loss but with potential availability impact. There is no indication of remote exploitation or privilege escalation from this specific flaw. No known exploits are reported in the wild.