Get real-time updates on Telegram
CVE-2026-23339: linux kernel 3.2; +2 more affected products
CVE-2026-23339 affects cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00123 (percentile 0.01831), scored 14-Oct-2026.
Affected technology
linux kernel · from 3.2.1 (inclusive), before 5.10.253 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.77 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux
linux kernel · 3.2
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before b367cb44d919f35b07cd56feffa15e68cd9f53f9, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 6d898f943766440cf766d30364e715111c3563b5, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 33f6b8a96dda045789796c3bcb451c74ac158039, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before dcbcccfc5195c9caaa4bb8d31f23c345f00a9e89, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 3245801d44a44c090acefe19a12d22d12cac45c5, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 9d448bbab724b94d6c561e1f314656f5b88a7cb3, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 54f7f0eaafa56b5994cdb5c7967946922c2e1d22, 6a2968aaf50c7a22fced77a5e24aa636281efca8 to before 7bd4b0c4779f978a6528c9b7937d2ca18e936e2c
Linux
Linux · 3.2
Linux
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens
Component: Not specified by the source
File: net/nfc/nci/core.c
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CWE
- CWE-401
- Product
- cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00123 · percentile 0.01831 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23339.html