PT-2026-26047 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23244

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0 #1

Description The Linux kernel contains a flaw in the nvme pr read keys() function related to memory allocation. A malicious or buggy userspace process can provide a large num keys value, leading to an attempt to allocate up to 4MB of memory. This can cause a warning in the page allocator when the allocation exceeds the MAX PAGE ORDER limit. The issue occurs because nvme pr read keys() uses the provided num keys value to calculate the allocation size for rse via struct size(), with an upper limit of PR KEYS MAX (64K). The fix involves using kvzalloc() instead of kzalloc().

Recommendations Update to a version newer than 6.19.0 #1.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-23244

Affected Products

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23244.json · Exploit
• https://git.kernel.org/stable/c/15fb6d627484ee39ed73e202ef4720e1fa5c898e · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23244 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23244 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23244 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23244 · Vendor Advisory
• https://git.kernel.org/stable/c/e42ff5abbd14927553b624c0e06d24df76156fe6 · Patch
• https://git.kernel.org/stable/c/5a501379a010690ae9ae88bef62a1bae1aca32e6 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23244 · Security Note
• https://git.kernel.org/stable/c/c3320153769f05fd7fe9d840cb555dd3080ae424 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-23244 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23244 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23244 · Vendor Advisory
• https://git.kernel.org/stable/c/baef52d80093bd686e70b3cb7e0512a40ae76705 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23244 · Security Note