PT-2026-8192 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-02-14 · CVE-2026-23184

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-rc6-00015-gc03e9c42ae8f

Description The Linux kernel contains a use-after-free issue within the binder subsystem, specifically in the binder netlink report() function. Oneway transactions sent to frozen targets can return a BR TRANSACTION PENDING FROZEN error, but are incorrectly treated as successful. This allows for unsafe access to transaction data ('t') after the error, potentially leading to a crash. The issue was identified through a KASAN report indicating a slab-use-after-free condition. The fix involves creating a transaction copy to ensure safe data access by binder netlink report() following a pending frozen error. The vulnerable function is binder netlink report().

Recommendations Update to Linux kernel version 6.19.0-rc6-00015-gc03e9c42ae8f or a later version to address this issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-23184

Affected Products

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23184.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-23184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23184 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23184 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23184 · Security Note
• https://git.kernel.org/stable/c/5e8a3d01544282e50d887d76f30d1496a0a53562 · Patch
• https://osv.dev/vulnerability/CVE-2026-23184 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23184 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23184 · Vendor Advisory
• https://git.kernel.org/stable/c/a6050dedb6f1cc23e518e3a132ab74a0aad6df90 · Patch
• https://git.kernel.org/linus/5e8a3d01544282e50d887d76f30d1496a0a53562 · Note
• https://twitter.com/CVEnew/status/2022716624650846442 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/vuldb/status/2022733226910060980 · Twitter Post