PT-2026-6164 · Linux+1 · Linux Kernel+1
Published
2026-01-01
·
Updated
2026-05-22
·
CVE-2026-23094
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The uacce module, which supports device isolation, creates sysfs files if the driver implements the
isolate err threshold read and isolate err threshold write callback functions. Users can read and configure the isolation policy through these sysfs files. Currently, sysfs files are created if either callback function is present. However, accessing a non-existent callback function can lead to a system crash. The issue is addressed by intercepting sysfs creation if neither read nor write callbacks exist, creating sysfs only if either is supported, and intercepting unsupported operations at the call site.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Ubuntu