PT-2026-27685 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23320

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel’s Network Controller Multiplexer (NCM) gadget driver has an issue where the lifecycle of the network device is not correctly aligned with the USB connection’s bind and unbind operations. Currently, the network device is allocated during configuration instance allocation and freed during instance deallocation, rather than being tied to the USB connection. This decoupling can lead to two problems: a NULL pointer dereference upon USB disconnection and dangling sysfs symbolic links. The issue occurs because the network device can outlive its parent device when the USB gadget is disconnected. The fix involves moving the network device allocation to the bind function and deallocation to the unbind function, ensuring the network interface exists only when the gadget function is bound to a configuration. To support pre-bind configuration, user-provided options are cached and applied to the network device upon creation. The fix also preserves a use-after-free fix from a previous commit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23320

Affected Products

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23320.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23320 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23320 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23320 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23320 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23320 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23320 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23320 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23320 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23320 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-23320 · Note
• https://git.kernel.org/stable/c/188338c1827842f898761a939669cf345bdf07e2 · Note
• https://git.kernel.org/stable/c/56a512a9b4107079f68701e7d55da8507eb963d9 · Note
• https://twitter.com/CVEnew/status/2036763529777131849 · Twitter Post