CVE-2026-23185: linux kernel from 6.17 (inclusive), before 6.18.10 (exclusive), 6.19 · update rc1, 6.19 · update rc2 (+6 more affected…

Affected technology

linux kernel · from 6.17 (inclusive), before 6.18.10 (exclusive)
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · 9748ad82a9d92b036ff3115207e36e2b9932e354 to before 9b9f52f052f4953fecd2190ae2dde3aa76d10962, 9748ad82a9d92b036ff3115207e36e2b9932e354 to before 5ff641011ab7fb63ea101251087745d9826e8ef5
Linux

Linux · 6.17
Linux

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 6 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 7 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source
File: drivers/net/wireless/intel/iwlwifi/mld/iface.c, drivers/net/wireless/intel/iwlwifi/mld/mac80211.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (Source advisory, CVSS 3.1): Local · High privileges required · No user interaction required

What an attacker can do

A local attacker can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. Source advisory’s CVSS 3.1 assessment (base score 6.7/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.