PT-2026-27713 · Linux+3 · Linux Kernel+4

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23348

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to the handling of Non-Volatile DIMM (NVDIMM) objects within the cxl (Coherent Accelerator Interface) subsystem. A race condition can occur during the creation of NVDIMM objects, specifically when the cxl translate module depends on cxl acpi. This dependency can lead to orphaned NVDIMM objects being reprobed after cxl acpi is removed, resulting in a NULL pointer dereference when accessing the dev->parent pointer, which points to the missing nvdimm bus. This issue was identified during unit testing with cxl-translate.sh and can be consistently reproduced with a short delay. The fix involves ensuring synchronous probing of the cxl nvb driver, validating the nvdimm bus during device attachment, acquiring appropriate locks, and invalidating cxl nvdimm flags to prevent further issues. The removal of cxl nvdimm devices is intended to prevent orphaned devices from probing after the nvdimm bus is gone.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-23348

Affected Products

Linux Kernel

Cxl Acpi

Cxl Nvb

Cxl Nvdimm

Cxl Translate

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23348.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-23348 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23348 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-23348 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23348 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23348 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23348 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23348 · Vendor Advisory
• https://git.kernel.org/stable/c/5fc4e150c5ada5f7d20d8f9f1b351f10481fbdf7 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23348 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23348 · Vendor Advisory
• https://git.kernel.org/stable/c/96a1fd0d84b17360840f344826897fa71049870e · Patch
• https://git.kernel.org/stable/c/5b230daeee420833287cc77314439903e5312f10 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-23348 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note