CVE-2026-23239: linux kernel from 5.6 (inclusive), before 6.12.75 (exclusive), from 6.13 (inclusive), before 6.18.16 (exclusive), from…

Affected technology

linux kernel · from 5.6 (inclusive), before 6.12.75 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.16 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.6 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

Linux · e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before f7ad8b1d0e421c524604d5076b73232093490d5c, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 664e9df53226b4505a0894817ecad2c610ab11d8, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before 022ff7f347588de6e17879a1da6019647b21321b, e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 to before e1512c1db9e8794d8d130addd2615ec27231d994
Linux

Linux · 5.6
Linux

Component: Not specified by the source
File: net/xfrm/espintcp.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.