PT-2026-8157 · Linux · Linux Kernel

Alexander · Published 2026-01-01 · Updated 2026-02-14 · CVE-2026-23162

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc2-lgci-xe-kernel+ #225

Description The Linux kernel contains a flaw in the drm/xe/nvm subsystem that can lead to a double-free condition during auxiliary device initialization failure. Specifically, a memory region is freed twice – once during successful initialization and again during uninitialization when auxiliary device addition fails. This can result in system instability and potentially lead to a kernel panic, as demonstrated by a KASAN report. The issue is triggered when auxiliary device init() succeeds, but auxiliary device add() fails. The fix involves moving the kfree(nvm) call into the failure path of auxiliary device init() to prevent the double-free.

Recommendations Update to a version of the Linux kernel newer than 6.19.0-rc2-lgci-xe-kernel+ #225.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2026-23162

Affected Products

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23162.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-23162 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23162 · Vendor Advisory
• https://git.kernel.org/stable/c/8a44241b0b83a6047c5448da1fff03fcc29496b5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23162 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-23162 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23162 · Vendor Advisory
• https://git.kernel.org/stable/c/32887d8e4bc0696b3cb6c5915a42b39cfd3434f4 · Patch
• https://osv.dev/vulnerability/CVE-2026-23162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23162 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2022708972986196348 · Twitter Post
• https://git.kernel.org/linus/8a44241b0b83a6047c5448da1fff03fcc29496b5 · Note