CVE-2026-22998: linux kernel from 5.4.268 (inclusive), before 5.5 (exclusive), from 5.10.209 (inclusive), before 5.10.249 (exclusive)…

Affected technology

linux kernel · from 5.4.268 (inclusive), before 5.5 (exclusive)
linux

linux kernel · from 5.10.209 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.15.148 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 6.1.75 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.6.14 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7.2 (inclusive), before 6.12.67 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

Linux · f775f2621c2ac5cc3a0b3a64665dad4fb146e510 to before baabe43a0edefac8cd7b981ff87f967f6034dafe, 4cb3cf7177ae3666be7fb27d4ad4d72a295fb02d to before 76abc83a9d25593c2b7613c549413079c14a4686, 2871aa407007f6f531fae181ad252486e022df42 to before 7d75570002929d20e40110d6b03e46202c9d1bc7, 24e05760186dc070d3db190ca61efdbce23afc88 to before fdecd3b6aac10d5a18d0dc500fe57f8648b66cd4, efa56305908ba20de2104f1b8508c6a7401833be to before 3def5243150716be86599c2a1767c29c68838b6d, efa56305908ba20de2104f1b8508c6a7401833be to before 374b095e265fa27465f34780e0eb162ff1bef913, efa56305908ba20de2104f1b8508c6a7401833be to before 32b63acd78f577b332d976aa06b56e70d054cbba, ee5e7632e981673f42a50ade25e71e612e543d9d, 70154e8d015c9b4fb56c1a2ef1fc8b83d45c7f68, 5.10.209 to before 5.10.249, 5.15.148 to before 5.15.199, 6.1.75 to before 6.1.162, 6.6.14 to before 6.6.122, 5.4.268 to before 5.5, 6.7.2 to before 6.8
Linux

Linux · 6.8
Linux

Component: Not specified by the source
Function: dereferences
File: drivers/nvme/target/tcp.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.