PT-2026-27710 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-03-25 · CVE-2026-23345

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.0-rc1

Description The Linux kernel contains a flaw in the GCS (Global Cache System) mapping when FEAT LPA2 is enabled. Specifically, the code incorrectly sets the PTE SHARED bit on GCS mappings, leading to a kernel panic. This occurs because bits 8-9 of the PTE replace the shareability attribute with bits 50-51 of the output address when FEAT LPA2 is enabled. The issue is triggered when enabling GCS on systems with LPA2, resulting in an 'Unable to handle kernel paging request' error.

Recommendations Update to a version newer than 7.0.0-rc1.

Exploit

Fix

Related Identifiers

CVE-2026-23345

Affected Products

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23345.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-23345 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23345 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23345 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23345 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23345 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23345 · Security Note
• https://git.kernel.org/stable/c/8a85b3131225a8c8143ba2ae29c0eef8c1f9117f · Patch
• https://osv.dev/vulnerability/CVE-2026-23345 · Vendor Advisory
• https://git.kernel.org/stable/c/ca1684dd297bf0725c1d487cff80e615497accf6 · Patch
• https://git.kernel.org/stable/c/1df3ef7e612d6ccbae5a48e1121553c47c2123d6 · Patch
• https://twitter.com/CVEnew/status/2036763502551912801 · Twitter Post
• https://git.kernel.org/linus/8a85b3131225a8c8143ba2ae29c0eef8c1f9117f · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note