PT-2026-8160 · Linux · Linux Kernel

CVE-2026-23165 · Publicado 2026-01-01 · Atualizado 2026-07-28

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to a deadlock in RSS configuration reading within the sfc module. The core now locks the net device's rss lock when handling the ethtool -x command, and driver implementations should not lock it again. The issue was addressed by removing the redundant locking mechanism.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Enumeração de Fraquezas

CWE-667

Identificadores relacionados

CVE-2026-23165

USN-8570-1

USN-8570-2

USN-8594-1

USN-8604-1

USN-8605-1

Produtos afetados

Linux Kernel

Referências · 293

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23165.json · Exploit
• https://ubuntu.com/security/CVE-2026-23055 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-23147 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-43185 · Aviso do Fabricante
• https://git.kernel.org/stable/c/944c614b0a7afa5b87612c3fb557b95a50ad654c · Correção
• https://ubuntu.com/security/CVE-2026-23010 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-23160 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2026-23165 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-8605-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-23116 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-23080 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-43493 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-31402 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-31649 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-23278 · Aviso do Fabricante