PT-2026-27711 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23346

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the ioremap prot() function related to memory access permissions on the arm64 architecture. Specifically, the function incorrectly handles permission controls when creating user mappings, potentially leading to kernel reads from unreadable memory and system crashes on systems with Protection Against Memory (PAN). The issue arises because the function returns a new user mapping that faults when accessed from the kernel. The fix involves extracting only the memory type from the user 'pgprot t' in ioremap prot() and asserting that a user mapping is being passed. The vulnerable code is called by generic access phys(), which is used in functions like environ read() and vfs read().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23346

OPENSUSE-SU-2026:20826-1

SUSE-SU-2026:21841-1

SUSE-SU-2026:21845-1

SUSE-SU-2026:21860-1

Affected Products

Linux Kernel

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23346.json · Exploit
• https://ubuntu.com/security/CVE-2026-23346 · Vendor Advisory
• https://git.kernel.org/stable/c/d1ad8fe7f72d73e1617bac79f2ec7a3bedf47e2a · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-23346 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23346 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23346 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23346 · Security Note
• https://git.kernel.org/stable/c/3d64dcc0799c2d6921ba027716b7be721eb19fa8 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23346 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23346 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23346 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23346 · Vendor Advisory
• https://git.kernel.org/stable/c/8f098037139b294050053123ab2bc0f819d08932 · Patch
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEarity/status/2037568611066454163 · Twitter Post