PT-2026-4671 · Linux · Linux Kernel

Lianqin · Published 2026-01-01 · Updated 2026-01-25 · CVE-2026-23009

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the xhci sideband endpoint removal process. Specifically, the xhci sideband remove endpoint() function incorrectly assumes the endpoint is running and possesses a valid transfer ring. This can lead to a crash when dereferencing a non-existent transfer ring (ep->ring) during suspend/wake-up stress testing or device re-enumeration. The issue arises from potential access to the ring after the xHCI has been reinitialized or the device disconnected. The fix involves removing unnecessary ring access and verifying the ring's existence before dereferencing it, as well as ensuring the endpoint is running before attempting to stop it. The xhci initialize ring info() call during sideband endpoint removal has been removed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23009

Affected Products

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23009.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-23009 · Security Note
• https://git.kernel.org/stable/c/dd83dc1249737b837ac5d57c81f2b0977c613d9f · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23009 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23009 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23009 · Vendor Advisory
• https://git.kernel.org/stable/c/34f6634dba87ef72b3c3a3a524be663adef7ab42 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23009 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23009 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23009 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/dd83dc1249737b837ac5d57c81f2b0977c613d9f · Note
• https://twitter.com/CVEnew/status/2015448641574453333 · Twitter Post
• https://t.me/CVEtracker/42970 · Telegram Post