PT-2026-27711 · Linux · Linux Kernel

CVE-2026-23346

·

Publicado

2026-01-01

·

Atualizado

2026-07-06

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw in the ioremap prot() function related to memory access permissions on the arm64 architecture. Specifically, the function incorrectly handles permission controls when creating user mappings, potentially leading to kernel reads from unreadable memory and system crashes on systems with Protection Against Memory (PAN). The issue arises because the function returns a new user mapping that faults when accessed from the kernel. The fix involves extracting only the memory type from the user 'pgprot t' in ioremap prot() and asserting that a user mapping is being passed. The vulnerable code is called by generic access phys(), which is used in functions like environ read() and vfs read().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2026-23346
ECHO-D68C-F009-ADEC
OESA-2026-2868
OESA-2026-2869
OPENSUSE-SU-2026:20826-1
SUSE-SU-2026:21834-1
SUSE-SU-2026:21841-1
SUSE-SU-2026:21845-1
SUSE-SU-2026:21860-1
SUSE-SU-2026:21876-1
SUSE-SU-2026:21877-1
SUSE-SU-2026:21916-1
SUSE-SU-2026:21919-1
SUSE-SU-2026:2217-1
SUSE-SU-2026:2238-1

Produtos afetados

Linux Kernel