PT-2026-26125 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23265

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the f2fs file system related to the handling of node footers during read and write operations. Specifically, the issue arises when a corrupted node page is loaded asynchronously without proper sanity checks on the node footer. This can lead to a kernel bug when the node page is written back, potentially causing system instability. The issue is triggered when there is an inconsistency between the node page index (nid) and the footer's nid. The vulnerability occurs when loading corrupted node pages using asynchronous methods like f2fs ra node pages() or f2fs ra node page().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-04165

CVE-2026-23265

Affected Products

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23265.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-23265 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23265 · Security Note
• https://git.kernel.org/stable/c/c386753db52b3a80afa6612bfdcb925aa5ca260f · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23265 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23265 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23265 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23265 · Vendor Advisory
• https://git.kernel.org/stable/c/855c54f1803e3ebc613677b4f389c7f92656a1fc · Patch
• https://bdu.fstec.ru/vul/2026-04165 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-23265 · Security Note
• https://ubuntu.com/security/CVE-2026-23265 · Vendor Advisory
• https://git.kernel.org/stable/c/50ac3ecd8e05b6bcc350c71a4307d40c030ec7e4 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-23265 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23265 · Vendor Advisory