CVE-2026-23292: linux kernel 5.3; +2 more affected products

Affected technology

linux kernel · from 4.9.201 (inclusive), before 4.10 (exclusive)
linux

linux kernel · from 4.14.154 (inclusive), before 4.15 (exclusive)
linux

linux kernel · from 4.19.84 (inclusive), before 4.20 (exclusive)
linux

linux kernel · from 5.3.1 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.77 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux

linux kernel · 5.3
linux

linux kernel · 5.3 · update rc8
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

Linux · b0841eefd9693827afb9888235e26ddd098f9cef to before 3161ef61f121d4573cad5b57c92188dcd9b284b3, b0841eefd9693827afb9888235e26ddd098f9cef to before e8ef82cb6443d5f3260b1b830e17f03dda4229ea, b0841eefd9693827afb9888235e26ddd098f9cef to before 4fcfa424a581d823cb1a9676e3eefe6ca17e453a, b0841eefd9693827afb9888235e26ddd098f9cef to before 9a5641024fbfd9b24fe65984ad85fea10a3ae438, b0841eefd9693827afb9888235e26ddd098f9cef to before 142eacb50fb903a4c10dee7e67b6e79ebb36a582, b0841eefd9693827afb9888235e26ddd098f9cef to before 14d4ac19d1895397532eec407433c5d74d9da53b, 49824b5c875087a52672b0c8e8ecbefe6f773532, 09e21253d17f53bdb5aac0e0dbd057a29fcbe8d1, 0dfc45be875a378c2a3a4d6ed8e668ec8eb75073, 4.9.201 to before 4.10, 4.14.154 to before 4.15, 4.19.84 to before 4.20
Linux

Linux · 5.3
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
Function: is, __configfs_open_file
File: drivers/target/target_core_configfs.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.