PT-2026-27691 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23326

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s xsk module related to fragment node deletion. A buffer leak can occur because the list node field is reused for both the xskb pool list and the buffer free list. Specifically, after a commit (b692bf9a7543), the list del() function was used to remove nodes from the xskb pool list without reinitializing the node pointers. This caused the list empty() function to incorrectly return false, preventing buffers from being added to the free list. The issue is addressed by using list del init() instead of list del() in fragment handling paths, ensuring proper reinitialization of list nodes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-23326

OPENSUSE-SU-2026:20572-1

SUSE-SU-2026:21237-1

SUSE-SU-2026:21352-1

SUSE-SU-2026:21361-1

Affected Products

Linux Kernel

References · 141

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23326.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-23326 · Vendor Advisory
• https://git.kernel.org/stable/c/60abb0ac11dccd6b98fd9182bc5f85b621688861 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23326 · Security Note
• https://ubuntu.com/security/CVE-2026-23326 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23326 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23326 · Vendor Advisory
• https://git.kernel.org/stable/c/5172adf9efb8298a52f4dcdc3f98d4d9d1e06a6d · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23326 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23326 · Security Note
• https://git.kernel.org/stable/c/645c6d8376ad4913cbffe0e0c2cca0c4febbe596 · Patch
• https://git.kernel.org/stable/c/2a9ea988465ece5b6896b1bdc144170a64e84c35 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:21237-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b38cbd4af5034635cff109e08788c63f956f3a69 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:20572-1 · Vendor Advisory