CVE-2026-23120: linux kernel 4.16; +1 more affected products

Affected technology

linux kernel · from 3.16.57 (inclusive), before 3.17 (exclusive)
linux

linux kernel · from 4.15.8 (inclusive), before 4.16 (exclusive)
linux

linux kernel · from 4.16.1 (inclusive), before 5.10.249 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.199 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.162 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.122 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.68 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.8 (exclusive)
linux

linux kernel · 4.16
linux

linux kernel · 4.16 · update rc5
linux

linux kernel · 4.16 · update rc6
linux

linux kernel · 4.16 · update rc7
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

Linux · d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 1f63ca44b4f419a1663d94d1bb0b4e2beb73fdb4, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 36c40a80109f1771d59558050b1a71e13c60c759, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before eae074dab764ea181bbed5e88626889319177498, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 68e92085427c84e7679ddb53c0d68836d220b6e7, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 3d6d414b214ce31659bded2f8df50c93a3769474, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 32d417497b79efb403d75f4c185fe6fd9d64b94f, d00fa9adc528c1b0e64d532556764852df8bd7b9 to before 7a29f6bf60f2590fe5e9c4decb451e19afad2bcf, 15df699fdc5af46a9fb15ae2d9326294852de5b5, 18bdaefc715b4530b4b2fe670506bb47713664cc, 3.16.57 to before 3.17, 4.15.8 to before 4.16
Linux

Linux · 4.16
Linux

Component: Not specified by the source
File: net/l2tp/l2tp_core.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.