PT-2026-27720 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-03-25 · CVE-2026-23355

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the libata subsystem related to handling deferred quality of service (QC) commands. Specifically, the code does not cancel pending work after clearing a deferred QC, potentially leading to incorrect command execution when a port is reset and new commands are queued. This can occur when non-NCQ commands are queued alongside NCQ commands, and a timeout or error clears the deferred QC before the associated work is completed. The issue arises because the work intended for an earlier non-NCQ command might be executed in the context of a later non-NCQ command, causing unexpected behavior. The vulnerability was identified through Syzbot reporting a WARN ON() in the ata scsi deferred qc work() function. The function ata scsi schedule deferred qc() is involved in scheduling the deferred QC. The vulnerable operation involves checking the return value of ap->ops->qc defer() before issuing the deferred QC.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23355

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23355.json · Exploit
• https://git.kernel.org/stable/c/6c5e8f16b5e8e614e829aaf38619bdd79107bb0a · Patch
• https://cve.org/CVERecord?id=CVE-2026-23355 · Security Note
• https://git.kernel.org/stable/c/58e658763ba2aa9168d8516b98a6314d7461a53e · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23355 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23355 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23355 · Vendor Advisory
• https://git.kernel.org/stable/c/0d12453818c35e1ded84633152c6b05002ae48b9 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23355 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23355 · Vendor Advisory
• https://git.kernel.org/stable/c/aac9b27f7c1f2b2cf7f50a9ca633ecbbcaf22af9 · Patch
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/aac9b27f7c1f2b2cf7f50a9ca633ecbbcaf22af9 · Note
• https://twitter.com/CVEnew/status/2036763491948802250 · Twitter Post