PT-2026-8182 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-02-14 · CVE-2026-23174

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the nvme-pci subsystem related to handling changes in device Direct Memory Access (DMA) map requirements. Specifically, the dma needs unmap state can change during data iterator mapping, potentially leading to a NULL dereference when accessing uninitialized dma vecs if the device's DMA unmapping requirements change mid-iteration. This occurs when enabling swiotlb, which can alter the DMA mapping requirements. The driver needs to save mapped DMA vectors for later unmapping, allocating them as needed during iteration rather than assuming initial allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23174

Affected Products

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23174.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23174 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23174 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23174 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23174 · Security Note
• https://ubuntu.com/security/CVE-2026-23174 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23174 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23174 · Vendor Advisory
• https://git.kernel.org/linus/071be3b0b6575d45be9df9c5b612f5882bfc5e88 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/071be3b0b6575d45be9df9c5b612f5882bfc5e88 · Note
• https://git.kernel.org/stable/c/f3ed399e9aa6f36e92d2d0fe88b387915e9705fe · Note
• https://twitter.com/CVEnew/status/2022716634050232584 · Twitter Post