P4Verified

CVE-2026-23066: linux kernel from 4.11 (inclusive), before 6.18.8 (exclusive), 6.19 · update rc1, 6.19 · update rc2 (+4 more affected…

CVE-2026-23066 affects cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00151 (percentile 0.03854), scored 14-Oct-2026.

Affected technology

linux kernel · from 4.11 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 8fd3b5e297854a4da0f273169baf4b1b7b257b97, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before c198628f3fca5c874d93874c233014d336e09f64, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before c6cebcb4e0b3140ec2ace45c020a9049527385d1, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 0464bf75590da75b8413c3e758c04647b4cdb3c6, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before cf969bddd6e69c5777fa89dc88402204e72f312a, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 930114425065f7ace6e0c0630fab4af75e059ea8, 540b1c48c37ac0ad66212004db21e1ff7e2d78be to before 2c28769a51deb6022d7fbd499987e237a01dd63a
Linux

Linux · 4.11
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: include/trace/events/rxrpc.h, net/rxrpc/recvmsg.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

CWE: CWE-674
Product: cbl2 kernel 5.15.200.1-1 on CBL Mariner 2.0
CCR priority: 22.0 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.00151 · percentile 0.03854 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23066.html