CVE-2026-23209: linux kernel 4.9; +1 more affected products

Affected technology

linux kernel · from 4.9.1 (inclusive), before 5.10.250 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.200 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.163 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.124 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.70 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.10 (exclusive)
linux

linux kernel · 4.9
linux

linux kernel · 4.9 · update rc6
linux

linux kernel · 4.9 · update rc7
linux

linux kernel · 4.9 · update rc8
linux

linux kernel · 6.19 · update rc1
linux

linux kernel · 6.19 · update rc2
linux

linux kernel · 6.19 · update rc3
linux

linux kernel · 6.19 · update rc4
linux

linux kernel · 6.19 · update rc5
linux

linux kernel · 6.19 · update rc6
linux

linux kernel · 6.19 · update rc7
linux

linux kernel · 6.19 · update rc8
linux

Linux · aa5fd0fb77486b8a6764ead8627baa14790e4280 to before da5c6b8ae47e414be47e5e04def15b25d5c962dc, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before 5dae6b36a7cb7a4fcf4121b95e9ca7f96f816c8a, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before c43d0e787cbba569ec9d11579ed370b50fab6c9c, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before 11ba9f0dc865136174cb98834280fb21bbc950c7, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before 986967a162142710076782d5b93daab93a892980, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before cdedcd5aa3f3cb8b7ae0f87ab3a936d0bd583d66, aa5fd0fb77486b8a6764ead8627baa14790e4280 to before f8db6475a83649689c087a8f52486fcc53e627e9
Linux

Linux · 4.9
Linux

Component: Not specified by the source
File: drivers/net/macvlan.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.