PT-2026-22922 · Linux · Linux Kernel

Published 2026-03-04 · Updated 2026-04-20 · CVE-2026-23236

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The UFX IOCTL REPORT DAMAGE ioctl does not correctly copy data from user space to kernel space. Instead, it directly references the memory, which can lead to issues if invalid data is provided from user space. The issue is resolved by correctly copying the memory before accessing it within the kernel. The vulnerable ioctl involves direct memory referencing, potentially leading to kernel-level issues when handling user-supplied data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-78632

CVE-2026-23236

ECHO-D315-E755-ACCA

OPENSUSE-SU-2026:10387-1

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:21841-1

Affected Products

Linux Kernel

References · 61

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23236.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-23236 · Vendor Advisory
• https://git.kernel.org/stable/c/f1e91bd4efeae48b0f42caed7e8ce2e3a0d05b02 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23236 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23236 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23236 · Security Note
• https://git.kernel.org/stable/c/1c008ad0f0d1c1523902b9cdb08e404129677bfc · Patch
• https://git.kernel.org/stable/c/6167af934f956d3ae1e06d61f45cd0d1004bbe1a · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2026-23236 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23236 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23236 · Security Note
• https://git.kernel.org/stable/c/120adae7b42faa641179270c067864544a50ab69 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23236 · Vendor Advisory
• https://git.kernel.org/stable/c/0634e8d650993602fc5b389ff7ac525f6542e141 · Patch
• https://git.kernel.org/stable/c/061cfeb560aa3ddc174153dbe5be9d0b55eb7248 · Patch