PT-2026-27729 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-30 · CVE-2026-23364

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the kernel’s ksmbd component related to Message Authentication Code (MAC) comparisons. The issue stems from the use of memcmp() for MAC comparisons, which is susceptible to timing attacks. To address this, the memcmp() function should be replaced with crypto memneq() to ensure constant-time comparisons, preventing potential information disclosure through timing variations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23364

ECHO-8A07-4FF6-BF0E

OESA-2026-1861

Affected Products

Linux Kernel

References · 28

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23364.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23364 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23364 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23364 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23268 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23364 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23364 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23290 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23364 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23364 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23364 · Vendor Advisory
• https://git.kernel.org/stable/c/2cdc56ed67615ba0921383a688f24415ebe065f3 · Patch
• https://git.kernel.org/stable/c/f4588b85efd6007d46b80aa1b9fb746628ffb3dc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23401 · Security Note
• https://git.kernel.org/stable/c/307afccb751f542246bd5dc68a2c1ffe1a78418c · Patch