PT-2026-27689 · Linux+1 · Linux Kernel+1

Published 2026-01-01 · Updated 2026-05-26 · CVE-2026-23324

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the handling of USB urb (USB Request Block) anchoring within the etas es58x CAN (Controller Area Network) driver. Specifically, the read bulk callback lacked proper anchoring of the urb before submission. This could lead to a memory leak if usb kill anchored urbs() was called before the urb was correctly anchored. The issue occurs when using the anchor pattern for urb submission.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23324

ECHO-8A3C-B340-62D5

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:21841-1

SUSE-SU-2026:21845-1

SUSE-SU-2026:21860-1

SUSE-SU-2026:21876-1

SUSE-SU-2026:21877-1

SUSE-SU-2026:21916-1

SUSE-SU-2026:21919-1

SUSE-SU-2026:2217-1

SUSE-SU-2026:2238-1

Affected Products

Linux Kernel

Etas Es58X Can Driver

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23324.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-23324 · Security Note
• https://git.kernel.org/stable/c/7a0171b4921ad443fee5ed4fcb9d99fa4776edac · Patch
• https://ubuntu.com/security/CVE-2026-23324 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23324 · Vendor Advisory
• https://git.kernel.org/stable/c/f6e90c113c92e83fc0963d5e60e16b0e8a268981 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23324 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23324 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23324 · Vendor Advisory
• https://git.kernel.org/stable/c/18eee279e9b5bff0db1aca9475ae4bc12804f05c · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23324 · Vendor Advisory
• https://git.kernel.org/stable/c/2185ea6e4ebcb61d1224dc7d187c59723cb5ad59 · Patch
• https://git.kernel.org/stable/c/5eaad4f768266f1f17e01232ffe2ef009f8129b7 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23324 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23324 · Vendor Advisory