PT-2026-29723 · Linux · Linux Kernel

Published 2026-04-02 · Updated 2026-04-03 · CVE-2026-23416

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to memory management (mm/mseal) where the end of a Virtual Memory Area (VMA) was not correctly updated during a merge operation. This occurred because the code stored the end of the current VMA in curr end, and then updated curr start to curr end to move to the next VMA. However, if a VMA was modified by vma modify flags(), curr end could become outdated, leading to an incorrect curr start in the subsequent iteration. The issue was resolved by unconditionally setting curr end to vma->vm end to ensure it remained current. The fix also simplifies the logic by clamping curr [start/end] to the input range and VMAs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-682

Related Identifiers

BDU:2026-04968

CVE-2026-23416

Affected Products

Linux Kernel

References · 17

• 🔥 https://github.com/bluedragonsecurity/CVE-2026-23416-POC · Exploit
• https://git.kernel.org/stable/c/2697dd8ae721db4f6a53d4f4cbd438212a80f8dc · Patch
• https://git.kernel.org/stable/c/83737e34b83a23b2a9bcf586b058b2c2a54c7c6b · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23416 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23416 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23416 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23416 · Vendor Advisory
• https://git.kernel.org/stable/c/40b3f4700e5535fbe74738cebb9379a40ec66bed · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23416 · Security Note
• https://ubuntu.com/security/CVE-2026-23416 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04968 · Security Note
• https://twitter.com/cyberbivash/status/2039697491407360315 · Twitter Post
• https://git.kernel.org/linus/2697dd8ae721db4f6a53d4f4cbd438212a80f8dc · Note
• https://github.com/advisories/GHSA-h9cv-r6cj-w8vj · Note
• https://lore.kernel.org/linux-cve-announce/2026040204-CVE-2026-23416-2941@gregkh · Note