CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-23097: linux kernel 5.10; +1 more affected products

CVE-2026-23097. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00134 (percentile 0.02572), scored 19-Oct-2026.

Affected technology

linux kernel · from 5.9.9 (inclusive), before 5.10 (exclusive)
linux

linux kernel · from 5.10.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 5.10
linux

linux kernel · 5.10 · update rc4
linux

linux kernel · 5.10 · update rc5
linux

linux kernel · 5.10 · update rc6
linux

linux kernel · 5.10 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · 336bf30eb76580b579dc711ded5d599d905c0217 to before e7396d23f9d5739f56cf9ab430c3a169f5508394, 336bf30eb76580b579dc711ded5d599d905c0217 to before ad97b9a55246eb940a26ac977f80892a395cabf9, 336bf30eb76580b579dc711ded5d599d905c0217 to before 5edb9854f8df5428b40990a1c7d60507da5bd330, 336bf30eb76580b579dc711ded5d599d905c0217 to before 526394af4e8ade89cacd1a9ce2b97712712fcc34, 336bf30eb76580b579dc711ded5d599d905c0217 to before b75070823b89009f5123fd0e05a8e0c3d39937c1, 336bf30eb76580b579dc711ded5d599d905c0217 to before 1b68efce6dd483d22f50d0d3800c4cfda14b1305, 336bf30eb76580b579dc711ded5d599d905c0217 to before b7880cb166ab62c2409046b2347261abf701530e, ef792d6ce0db6a56e56743b1de1716a982c3b851, 5.9.9 to before 5.10
Linux

Linux · 5.10
Linux

Component: Not specified by the source
File: mm/migrate.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-362
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00134 · percentile 0.02572 · 2026-10-19
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23097.html