PT-2026-7992 · Linux+2 · Linux Kernel+2

Published 2026-01-01 · Updated 2026-05-22 · CVE-2026-23112

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow exists in the NVMe-TCP component where the nvmet tcp build pdu iovec() function could walk past cmd->req.sg when a Protocol Data Unit (PDU) length or offset exceeds sg cnt. This allows the use of incorrect sg->length and sg->offset values, potentially leading to a General Protection Fault (GPF) or Kernel Address Sanitizer (KASAN) error during the execution of the copy to iter() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-23112

ECHO-78CB-5DE0-2D3E

OESA-2026-1505

OESA-2026-1566

OESA-2026-1567

OESA-2026-1570

OPENSUSE-SU-2026:20416-1

SUSE-SU-2026:0962-1

SUSE-SU-2026:1078-1

SUSE-SU-2026:1081-1

SUSE-SU-2026:20667-1

SUSE-SU-2026:20720-1

SUSE-SU-2026:20838-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

SUSE-SU-2026:20931-1

SUSE-SU-2026:21284-1

USN-8244-1

USN-8245-1

USN-8254-1

USN-8254-2

USN-8254-3

USN-8255-1

USN-8255-2

USN-8255-3

USN-8257-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8273-1

USN-8275-1

USN-8297-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 2453

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23112.json · Exploit
• https://ubuntu.com/security/CVE-2025-68237 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22125 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40323 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71111 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39823 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1570 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68767 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71236 · Security Note
• https://ubuntu.com/security/CVE-2025-39914 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40194 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71083 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1566 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1505 · Vendor Advisory