CVE-2026-23247: linux kernel 4.10.14, 4.11; +1 more affected products

Affected technology

linux kernel · after 4.11 (exclusive), before 6.18.17 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux

linux kernel · 4.10.14
linux

linux kernel · 4.11
linux

linux kernel · 4.11 · update rc6
linux

linux kernel · 4.11 · update rc7
linux

linux kernel · 4.11 · update rc8
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

Linux · 28ee1b746f493b7c62347d714f58fbf4f70df4f0 to before e873e8c16b2fb743a381a9e59c108e63512301ec, 28ee1b746f493b7c62347d714f58fbf4f70df4f0 to before 5da5662181ef8a251e3ba564903002c2e87de452, 28ee1b746f493b7c62347d714f58fbf4f70df4f0 to before eae2f14ab2efccdb7480fae7d42c4b0116ef8805, 28ee1b746f493b7c62347d714f58fbf4f70df4f0 to before 46e5b0d7cf55821527adea471ffe52a5afbd9caf, 28ee1b746f493b7c62347d714f58fbf4f70df4f0 to before 165573e41f2f66ef98940cf65f838b2cb575d9d1, 443fac9f2618b93cbc5ab068dc594530236b3a23, 4.10.14 to before 4.11
Linux

Linux · 4.11
Linux

Component: Not specified by the source
File: include/net/secure_seq.h, include/net/tcp.h, net/core/secure_seq.c, net/ipv4/syncookies.c, net/ipv4/tcp_input.c, net/ipv4/tcp_ipv4.c, net/ipv6/syncookies.c, net/ipv6/tcp_ipv6.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.