Get real-time updates on Telegram
CVE-2026-23013: linux kernel 6.9; +1 more affected products
CVE-2026-23013. CVSS 3.1 base score 7.8 (HIGH, NVD). EPSS 0.00175 (percentile 0.06481), scored 15-Oct-2026.
Affected technology
linux kernel · from 6.9.1 (inclusive), before 6.12.67 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.7 (exclusive)
linux
linux kernel · 6.9
linux
linux kernel · 6.19 · update rc1
linux
linux kernel · 6.19 · update rc2
linux
linux kernel · 6.19 · update rc3
linux
linux kernel · 6.19 · update rc4
linux
linux kernel · 6.19 · update rc5
linux
linux kernel · 6.19 · update rc6
linux
linux kernel · 6.19 · update rc7
linux
linux kernel · 6.19 · update rc8
linux
Linux · 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before aa05a8371ae4a452df623f7202c72409d3c50e40, 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before aa4c066229b05fc3d3c5f42693d25b1828533b6e, 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before f93fc5d12d69012788f82151bee55fce937e1432
Linux
Linux · 6.9
Linux
Component: Not specified by the source
File: drivers/net/ethernet/marvell/octeon_ep_vf/octep_vf_main.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-416
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.00175 · percentile 0.06481 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:12:45.293412+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23013.html