Skip to main content

Linux EUVDEUVD-2026-17835

| CVE-2026-23407 HIGH
Out-of-bounds Read (CWE-125)
2026-04-01 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Buffer Overflow Information Disclosure Linux Debian
7.8
CVSS 3.1 · NVD
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Recon
    Gain local user access
  2. Delivery
    Identify AppArmor policy loading interface
  3. Exploit
    Craft malicious DFA with OOB DEFAULT_TABLE
  4. Install
    Trigger policy load via privileged path
  5. C2
    Kernel reads OOB in verify_dfa()
  6. Execute
    Corrupt adjacent slab memory
  7. Impact
    Escalate to kernel code execution

Vulnerability Assessment

Weakness
CWE
CWE-125
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK

1 technique across 1 tactic: Collection

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

Attacker must have local authenticated access (PR:L) to a system running vulnerable Linux kernel 4.17+ before patched versions. Critically, exploitation requires ability to load AppArmor policies, which defaults to requiring root privileges or CAP_MAC_ADMIN capability. On standard Linux installations, unprivileged users cannot trigger this path. Exploitation becomes practical in misconfigured environments: (1) container platforms allowing unprivileged users to load custom AppArmor profiles, (2) systems with setuid binaries or services running with MAC_ADMIN that process attacker-controlled policy data, (3) compromised accounts with policy-loading permissions. The vulnerability requires no user interaction (UI:N) once the attacker has necessary privileges. Limiting factors: default Linux permission models restrict AppArmor policy manipulation to root, making this primarily a privilege-escalation primitive rather than initial access vector; requires crafting valid-but-malicious DFA structures with knowledge of kernel AppArmor internals; target kernel must have AppArmor enabled (CONFIG_SECURITY_APPARMOR=y).
Impact

Real-world risk is moderate despite high CVSS 7.8. CVSS vector AV:L/AC:L/PR:L indicates local access with low-privilege authentication required - attackers need existing user-level access to load AppArmor policies, typically restricted to root or CAP_MAC_ADMIN capabilities on production systems. EPSS 0.02% (5th percentile) confirms negligible widespread exploitation likelihood. No CISA KEV listing or public POC identified, reducing immediate weaponization risk. However, the vulnerability enables memory corruption primitives useful in privilege escalation chains on systems where unprivileged users can trigger policy loading (misconfigured containers, compromised user accounts). Ubuntu's medium priority assessment and rapid stable-branch patching (6.6.130, 6.12.77, 6.18.18, 6.19.8) suggests distributions treat this as exploitable given sufficient local access. SSVC decision: exploitation requires specialized local access, not automatable remotely, technical impact allows memory corruption but requires chaining with policy-loading permissions. Priority: patch during regular maintenance windows for enterprise systems; expedite for multi-tenant/container platforms where unprivileged policy manipulation might be possible.
Exploit ScenarioDerived

An attacker with local user-level access on a multi-tenant Linux system crafts a malicious AppArmor policy binary containing a DFA with differentially encoded states and an out-of-bounds DEFAULT_TABLE entry. They trigger policy loading via a writable AppArmor interface (misconfigured container policy injection point or compromised service with MAC_ADMIN capabilities). The kernel's verify_dfa() processes the malformed DFA, reads DEFAULT_TABLE[j] with value 0x9999 (far exceeding state_count), then uses this as an index into verification structures causing slab out-of-bounds memory corruption. Depending on heap layout, the attacker corrupts adjacent kernel structures to escalate privileges or execute arbitrary kernel code.
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv2 – Apr 18, 2026

Out-of-bounds read and write in Linux kernel AppArmor DFA verification allows local authenticated users to cause memory corruption and potential privilege escalation. Affects Linux kernel 4.17+ through 6.12.x, actively patched in stable branches 6.6.130, 6.12.77, 6.18.18, and 6.19.8. The vulnerability occurs during AppArmor policy loading when malformed DFA structures bypass bounds checking in verify_dfa(). EPSS score of 0.02% suggests low exploitation probability in the wild; no public exploit code or CISA KEV listing identified. Ubuntu rates this medium priority with patches released via USN-8152-1.

Earlier versions of this analysis (1)
v1 Apr 01, 2026 - 09:22 CVSS 7.8

Out-of-bounds read and write in Linux kernel AppArmor verify_dfa() function allows local attackers to trigger memory corruption via malformed DFA profiles with invalid DEFAULT_TABLE entries. The vulnerability exists because bounds validation is skipped during differential encoding chain traversal, permitting an attacker with CAP_MAC_ADMIN or write access to /sys/kernel/security/apparmor/policy to craft a malicious policy that causes slab-out-of-bounds access. No public exploit code or active exploitation has been identified; patch is available in upstream kernel.

RemediationAI

Upgrade to patched Linux kernel versions: 6.6.130+, 6.12.77+, 6.18.18+, 6.19.8+, or 7.0-rc4+. Ubuntu users should apply USN-8152-1 via standard update mechanisms (apt update && apt upgrade). Debian users should follow distribution-specific security advisories. Upstream fixes available in kernel.org stable commits: f39e126e56c6 (mainline), 76b4d36c5122, 5a68e46dfe0c, 7c7cf05e0606, d352873bbefa, 22094c996968, 555829fd91ea, a75e12ca90c9. For systems where immediate patching is infeasible, restrict AppArmor policy loading to root-only by ensuring /sys/kernel/security/apparmor/.load and policy_update interfaces require CAP_MAC_ADMIN; verify no unprivileged processes or containers have write access to AppArmor policy paths (/etc/apparmor.d/, /var/lib/apparmor/). Note this does not eliminate risk if the root account is compromised but prevents unprivileged exploitation. Audit container configurations (Docker, LXC, Kubernetes) for AppArmor policy manipulation permissions - disable custom profile loading in multi-tenant environments until patched. Trade-off: restricting policy loading limits legitimate administrative automation requiring temporary policy adjustments.

Affected VersionsENISA

Linux 031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <f39e126e56c6ec1930fae51ad6bca3dae2a4c3ed
Linux 031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <76b4d36c5122866452d34d8f79985e191f9c3831
Linux 4.17
Linux 031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <5a68e46dfe0c8c8ffc6f425ebc4cae6238566ecc
Linux 031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <7c7cf05e0606f554c467e3a4dc49e2e578a755b4
Linux patch: 6.19.8
Linux 031dcc8f4e84fea37dc6f78fdc7288aa7f8386c3 <d352873bbefa7eb39995239d0b44ccdf8aaa79a4
Linux patch: 6.18.18
Linux patch: 6.6.130
Linux patch: 0
Linux patch: 7.0-rc4
Linux patch: 6.12.77

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

AppArmor is Linux's mandatory access control (MAC) framework that uses deterministic finite automata (DFA) to match security policies. The verify_dfa() function validates serialized DFA structures during policy loading. DFAs use state transition tables including a DEFAULT_TABLE that specifies fallback states for transitions. When processing differentially encoded DFA states (a compression technique where state N references state M's transitions as a base), the code reads k = DEFAULT_TABLE[j] and uses k as an array index into state-dependent tables. The vulnerability exists in commit 031dcc8f4e84 (introduced ~2018 in Linux 4.17) where bounds checking only applies to non-differentially-encoded states. An attacker crafting a malicious AppArmor policy with DEFAULT_TABLE[j] >= state_count causes the kernel to read/write beyond allocated DFA verification structures, triggering KASAN slab-out-of-bounds detections. The fix unconditionally validates all DEFAULT_TABLE entries regardless of encoding flags.

Know when the next one hits your stack

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Ubuntu MEDIUM
SUSE 6.1 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
Red Hat MEDIUM

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

2
Patch released
Apr 01, 2026 - 14:30 nvd
Patch available
CVE Published
Apr 01, 2026 - 09:16 nvd
HIGH 7.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

apparmor: fix missing bounds check on DEFAULT table in verify_dfa()

The verify_dfa() function only checks DEFAULT_TABLE bounds when the state is not differentially encoded.

When the verification loop traverses the differential encoding chain, it reads k = DEFAULT_TABLE[j] and uses k as an array index without validation. A malformed DFA with DEFAULT_TABLE[j] >= state_count, therefore, causes both out-of-bounds reads and writes.

[ 57.179855] ============== [ 57.180549] BUG: KASAN: slab-out-of-bounds in verify_dfa+0x59a/0x660 [ 57.180904] Read of size 4 at addr ffff888100eadec4 by task su/993

[ 57.181554] CPU: 1 UID: 0 PID: 993 Comm: su Not tainted 6.19.0-rc7-next-20260127 #1 PREEMPT(lazy) [ 57.181558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.181563] Call Trace: [ 57.181572] <TASK> [ 57.181577] dump_stack_lvl+0x5e/0x80 [ 57.181596] print_report+0xc8/0x270 [ 57.181605] ? verify_dfa+0x59a/0x660 [ 57.181608] kasan_report+0x118/0x150 [ 57.181620] ? verify_dfa+0x59a/0x660 [ 57.181623] verify_dfa+0x59a/0x660 [ 57.181627] aa_dfa_unpack+0x1610/0x1740 [ 57.181629] ? __kmalloc_cache_noprof+0x1d0/0x470 [ 57.181640] unpack_pdb+0x86d/0x46b0 [ 57.181647] ? srso_alias_return_thunk+0x5/0xfbef5 [ 57.181653] ? srso_alias_return_thunk+0x5/0xfbef5 [ 57.181656] ? aa_unpack_nameX+0x1a8/0x300 [ 57.181659] aa_unpack+0x20b0/0x4c30 [ 57.181662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 57.181664] ? stack_depot_save_flags+0x33/0x700 [ 57.181681] ? kasan_save_track+0x4f/0x80 [ 57.181683] ? kasan_save_track+0x3e/0x80 [ 57.181686] ? __kasan_kmalloc+0x93/0xb0 [ 57.181688] ? __kvmalloc_node_noprof+0x44a/0x780 [ 57.181693] ? aa_simple_write_to_buffer+0x54/0x130 [ 57.181697] ? policy_update+0x154/0x330 [ 57.181704] aa_replace_profiles+0x15a/0x1dd0 [ 57.181707] ? srso_alias_return_thunk+0x5/0xfbef5 [ 57.181710] ? __kvmalloc_node_noprof+0x44a/0x780 [ 57.181712] ? aa_loaddata_alloc+0x77/0x140 [ 57.181715] ? srso_alias_return_thunk+0x5/0xfbef5 [ 57.181717] ? _copy_from_user+0x2a/0x70 [ 57.181730] policy_update+0x17a/0x330 [ 57.181733] profile_replace+0x153/0x1a0 [ 57.181735] ? rw_verify_area+0x93/0x2d0 [ 57.181740] vfs_write+0x235/0xab0 [ 57.181745] ksys_write+0xb0/0x170 [ 57.181748] do_syscall_64+0x8e/0x660 [ 57.181762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.181765] RIP: 0033:0x7f6192792eb2

Remove the MATCH_FLAG_DIFF_ENCODE condition to validate all DEFAULT_TABLE entries unconditionally.

Executive ViewAI

Why It Matters

CVE-2026-23407 is a high-severity privilege escalation vulnerability in the Linux kernel AppArmor subsystem affecting versions 4.17 through 6.12.x. Local authenticated users can trigger memory corruption through malformed AppArmor policy files, potentially escalating privileges on affected systems. Organizations running affected Linux kernels must prioritize patching to prevent lateral movement and unauthorized privilege elevation by authenticated attackers.

Business Impact: High
Compensating Controls

Apply vendor patch. If immediate patching is unavailable, restrict SSH/console access to trusted administrators only and disable AppArmor policy reloading where operationally feasible pending kernel updates. Monitor system logs for AppArmor policy load errors.

Threat Intelligence Overview

EPSS Score
0.0%
Top 95% exploitable
Data Quality
6 sources
Confidence: High
EUVD NVD CVE.org EPSS Vendor VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.0%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No
Human Impact
High

Priority Score

39
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +39
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

Related Vulnerabilities in Linux Kernel AppArmor Security Fixes

View all 9
CVE-2026-23404 MEDIUM
5.5
CVE-2026-23411 HIGH
7.8
CVE-2026-23408 HIGH
7.8
CVE-2026-23410 HIGH
7.8
CVE-2026-23406 HIGH
7.8
CVE-2026-23403 MEDIUM
5.5
CVE-2026-23405 MEDIUM
5.5
CVE-2026-23409 MEDIUM
5.5

Same weakness CWE-125 – Out-of-bounds Read

View all
CVE-2014-0160 HIGH POC
7.5
CVE-2016-5198 HIGH POC
8.8
CVE-2025-5777 CRITICAL POC
9.3
CVE-2016-1646 HIGH POC
8.8
CVE-2017-5030 HIGH POC
8.8
CVE-2016-4523 HIGH
7.5
CVE-2024-48456 HIGH POC
7.5
CVE-2024-48457 HIGH POC
7.5

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

Ubuntu

Priority: Medium
linux
Release Status Version
trusty needs-triage -
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-hwe
Release Status Version
xenial needs-triage -
bionic ignored replaced by linux-hwe-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-5.8
Release Status Version
focal ignored superseded by linux-hwe-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
linux-hwe-5.11
Release Status Version
focal ignored superseded by linux-hwe-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
linux-hwe-5.13
Release Status Version
focal ignored superseded by linux-hwe-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
linux-hwe-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
linux-hwe-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
questing DNE -
upstream ignored superseded by linux-hwe-6.14
linux-hwe-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-hwe-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-hwe-edge
Release Status Version
xenial ignored superseded by linux-hwe
bionic ignored superseded by linux-hwe-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-lts-xenial
Release Status Version
trusty needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-kvm
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-aws
Release Status Version
trusty needs-triage -
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-aws-5.0
Release Status Version
bionic ignored superseded by linux-aws-5.3
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
linux-aws-5.3
Release Status Version
bionic ignored superseded by linux-aws-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
linux-aws-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-5.8
Release Status Version
focal ignored superseded by linux-aws-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
linux-aws-5.11
Release Status Version
focal ignored superseded by linux-aws-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
linux-aws-5.13
Release Status Version
focal ignored superseded by linux-aws-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
linux-aws-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
linux-aws-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-aws-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-aws-hwe
Release Status Version
xenial needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure
Release Status Version
trusty needs-triage -
xenial needs-triage -
bionic ignored superseded by linux-azure-5.3
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-azure-4.15
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-5.3
Release Status Version
bionic ignored superseded by linux-azure-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
linux-azure-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-5.8
Release Status Version
focal ignored superseded by linux-azure-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
linux-azure-5.11
Release Status Version
focal ignored superseded by linux-azure-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
linux-azure-5.13
Release Status Version
focal ignored superseded by linux-azure-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
linux-azure-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
linux-azure-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
questing DNE -
upstream ignored superseded by linux-azure-6.14
linux-azure-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-fde
Release Status Version
focal ignored superseded by linux-azure-fde-5.15
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-azure-fde-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
linux-azure-fde-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-fde-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-nvidia
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-bluefield
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-edge
Release Status Version
bionic ignored superseded by linux-azure-5.3
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
linux-fips
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-aws-fips
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-azure-fips
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-fips
Release Status Version
bionic needs-triage -
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp
Release Status Version
xenial needs-triage -
bionic ignored superseded by linux-gcp-5.3
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-gcp-4.15
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-5.3
Release Status Version
bionic ignored superseded by linux-gcp-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
linux-gcp-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-5.8
Release Status Version
focal ignored superseded by linux-gcp-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
linux-gcp-5.11
Release Status Version
focal ignored superseded by linux-gcp-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
linux-gcp-5.13
Release Status Version
focal ignored superseded by linux-gcp-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
linux-gcp-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
linux-gcp-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
questing DNE -
upstream ignored superseded by linux-gcp-6.14
linux-gcp-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gcp-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gke
Release Status Version
focal ignored end of kernel support
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gke-4.15
Release Status Version
bionic ignored superseded by linux-gke-5.0
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
linux-gke-5.4
Release Status Version
bionic ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-gkeop
Release Status Version
focal ignored end of kernel support
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-gkeop-5.4
Release Status Version
bionic ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-ibm
Release Status Version
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-ibm-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-ibm-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-ibm-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-intel-iotg
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-intel-iotg-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-iot
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-intel-iot-realtime
Release Status Version
jammy ignored superseded by Ubuntu Pro ppa version
noble DNE -
questing DNE -
upstream needs-triage -
linux-lowlatency
Release Status Version
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-lowlatency-hwe-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
linux-lowlatency-hwe-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
questing DNE -
upstream ignored replaced by linux-hwe-6.14
linux-nvidia
Release Status Version
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
linux-nvidia-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
questing DNE -
upstream ignored end of kernel support
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-nvidia-tegra
Release Status Version
jammy needs-triage -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-nvidia-tegra-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-nvidia-tegra-igx
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle
Release Status Version
xenial needs-triage -
bionic needs-triage -
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-oracle-5.0
Release Status Version
bionic ignored superseded by linux-oracle-5.3
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
linux-oracle-5.3
Release Status Version
bionic ignored superseded by linux-oracle-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
linux-oracle-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle-5.8
Release Status Version
focal ignored superseded by linux-oracle-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
linux-oracle-5.11
Release Status Version
focal ignored superseded by linux-oracle-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
linux-oracle-5.13
Release Status Version
focal ignored superseded by linux-oracle-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
linux-oracle-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
linux-oracle-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-oracle-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-oracle-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-oem
Release Status Version
bionic ignored replaced by linux-hwe-5.4
jammy DNE -
noble DNE -
questing DNE -
upstream ignored end of life
linux-oem-5.6
Release Status Version
focal ignored superseded by linux-oem-5.10
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
linux-oem-5.10
Release Status Version
focal ignored superseded by linux-oem-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
linux-oem-5.13
Release Status Version
focal ignored superseded by linux-oem-5.14
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
linux-oem-5.14
Release Status Version
focal ignored replaced by linux-hwe-5.15
jammy DNE -
noble DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
questing DNE -
upstream ignored superseded by linux-oem-6.14
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
questing DNE -
upstream ignored superseded by linux-oem-6.14
linux-oem-6.14
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-oem-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-raspi
Release Status Version
focal needs-triage -
jammy needs-triage -
noble needs-triage -
questing needs-triage -
upstream needs-triage -
linux-raspi2
Release Status Version
focal ignored replaced by linux-raspi
jammy DNE -
noble DNE -
questing DNE -
upstream ignored replaced by linux-raspi
linux-raspi-5.4
Release Status Version
bionic needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-raspi-realtime
Release Status Version
jammy DNE -
noble ignored superseded by Ubuntu Pro ppa version
questing DNE -
upstream needs-triage -
linux-realtime
Release Status Version
jammy ignored superseded by Ubuntu Pro ppa version
noble ignored superseded by Ubuntu Pro ppa version
questing needs-triage -
upstream needs-triage -
linux-realtime-6.8
Release Status Version
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-realtime-6.14
Release Status Version
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-riscv
Release Status Version
focal ignored superseded by linux-riscv-5.8
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
questing needs-triage -
upstream needs-triage -
linux-riscv-5.8
Release Status Version
focal ignored superseded by linux-riscv-5.11
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
linux-riscv-5.11
Release Status Version
focal ignored superseded by linux-riscv-5.13
jammy DNE -
noble DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
linux-riscv-5.15
Release Status Version
focal needs-triage -
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
linux-riscv-6.8
Release Status Version
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-riscv-6.14
Release Status Version
jammy DNE -
noble ignored superseded by linux-riscv-6.17
questing DNE -
upstream ignored superseded by linux-riscv-6.17
linux-riscv-6.17
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
questing DNE -
upstream ignored end of life
linux-xilinx
Release Status Version
jammy DNE -
noble needs-triage -
questing DNE -
upstream needs-triage -
linux-xilinx-zynqmp
Release Status Version
focal needs-triage -
jammy needs-triage -
noble DNE -
questing DNE -
upstream needs-triage -
linux-realtime-6.17
Release Status Version
jammy DNE -
noble DNE -
questing DNE -
upstream needs-triage -

Debian

linux
Release Status Fixed Version Urgency
bullseye fixed 5.10.251-1 -
bullseye (security) fixed 5.10.251-1 -
bookworm fixed 6.1.164-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.74-2 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.8-1 -
sid fixed 6.19.10-1 -
(unstable) fixed 6.19.6-2 -

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-23407 ADVISORY https://ubuntu.com/security/notices/USN-8152-1 ADVISORY https://vuldb.com/vuln/354618 REF https://git.kernel.org/stable/c/22094c996968a7c5b59cd3fc9fcbdfdd46d02fec REF https://git.kernel.org/stable/c/555829fd91eaf0711e369b0a92aecb0f0aa3281f REF https://git.kernel.org/stable/c/5a68e46dfe0c8c8ffc6f425ebc4cae6238566ecc REF https://git.kernel.org/stable/c/76b4d36c5122866452d34d8f79985e191f9c3831 REF https://git.kernel.org/stable/c/7c7cf05e0606f554c467e3a4dc49e2e578a755b4 REF https://git.kernel.org/stable/c/a75e12ca90c9e70ba10fee1be2f63cdd63d91a7c REF https://git.kernel.org/stable/c/d352873bbefa7eb39995239d0b44ccdf8aaa79a4 REF https://git.kernel.org/stable/c/f39e126e56c6ec1930fae51ad6bca3dae2a4c3ed

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy