PT-2026-8135 · Linux+2 · Linux Kernel+2

Published 2026-01-01 · Updated 2026-06-16 · CVE-2026-23140

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the bpf subsystem, specifically within the test run functionality. A failure to properly account for the size of the xdp frame structure when determining the allowed metadata size can lead to an uninitialised frame structure during packet transmission in live packet mode. This occurs when userspace provides a metadata size that exceeds the available headroom. The xdp update frame from buff() function is involved in this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-457

Related Identifiers

BDU:2026-07427

CVE-2026-23140

OESA-2026-1642

OESA-2026-1643

OESA-2026-1644

OPENSUSE-SU-2026:20572-1

SUSE-SU-2026:1573-1

SUSE-SU-2026:1661-1

SUSE-SU-2026:21114-1

SUSE-SU-2026:21123-1

SUSE-SU-2026:21237-1

SUSE-SU-2026:21255-1

SUSE-SU-2026:21352-1

SUSE-SU-2026:21361-1

USN-8278-1

USN-8278-2

USN-8289-1

USN-8289-2

USN-8296-1

USN-8296-2

USN-8393-1

USN-8440-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 650

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23140.json · Exploit
• https://ubuntu.com/security/CVE-2026-46000 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23088 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71101 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68773 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68744 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68372 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23001 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23140 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68808 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68813 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71075 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46323 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23206 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23394 · Vendor Advisory