PT-2026-8119 · Linux+2 · Linux Kernel+2

Published 2026-01-01 · Updated 2026-06-16 · CVE-2026-23126

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc5

Description The netdevsim driver lacks a protection mechanism for operations on the bpf bound progs list. Concurrent operations, specifically nsim bpf create prog() performing list add tail and nsim bpf destroy prog() performing list del, can lead to list corruption and a kernel crash. The crash occurs due to a race condition when adding and deleting entries from the list simultaneously. The list del entry valid or report function is implicated in the crash.

Recommendations Update to a version newer than 6.19.0-rc5.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-23126

OESA-2026-1760

USN-8278-1

USN-8278-2

USN-8289-1

USN-8289-2

USN-8296-1

USN-8296-2

USN-8393-1

USN-8440-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 556

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23126.json · Exploit
• https://ubuntu.com/security/CVE-2026-46000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23088 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23137 · Security Note
• https://ubuntu.com/security/CVE-2025-71101 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68773 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23133 · Security Note
• https://ubuntu.com/security/CVE-2025-68744 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68372 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23001 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68794 · Security Note
• https://ubuntu.com/security/CVE-2025-68808 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68261 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68208 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68214 · Security Note