Get real-time updates on Telegram
CVE-2026-23001: linux kernel 3.18; +1 more affected products
CVE-2026-23001. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00209 (percentile 0.10422), scored 19-Oct-2026.
Affected technology
linux kernel · from 3.18.1 (inclusive), before 5.10.249 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 3.18
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 8133e85b8a3ec9f10d861e0002ec6037256e987e, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 484919832e2db6ce1e8add92c469e5d459a516b5, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 232afc74a6dde0fe1830988e5827921f5ec9bb3f, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 15f6faf36e162532bec5cc05eb3fc622108bf2ed, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 8518712a2ca952d6da2238c6f0a16b4ae5ea3f13, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 6dbead9c7677186f22b7981dd085a0feec1f038e, 79cf79abce71eb7dbc40e2f3121048ca5405cb47 to before 7470a7a63dc162f07c26dbf960e41ee1e248d80e
Linux
Linux · 3.18
Linux
Component: Not specified by the source
File: drivers/net/macvlan.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-416
- CCR priority
- 31.3 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00209 · percentile 0.10422 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 19:46:42.191502+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23001.html