CVE-2026-23356: linux kernel 3.10; +2 more affected products

Affected technology

linux kernel · from 3.10.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.77 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux

linux kernel · 3.10
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 08a1ddab6df7d3c7b6341774cb1cf4b21b96a214 to before 933d161baa3794547adee621c0bf52cbf2c1b3cd, 08a1ddab6df7d3c7b6341774cb1cf4b21b96a214 to before cf01aa6288e1190f89865e765056e2a9d8190639, 08a1ddab6df7d3c7b6341774cb1cf4b21b96a214 to before 7752569fc78e89794ce28946529850282233f99d, 08a1ddab6df7d3c7b6341774cb1cf4b21b96a214 to before e91d8d6565b7819d13dab21d4dbed5b45efba59b, 08a1ddab6df7d3c7b6341774cb1cf4b21b96a214 to before eef1390125b660b8b61f9f227a03bb9c5e6d36a5, 08a1ddab6df7d3c7b6341774cb1cf4b21b96a214 to before d1ef3aed4df2ef1fe46befd8f2da9a6ec5445508, 08a1ddab6df7d3c7b6341774cb1cf4b21b96a214 to before f558e5404a72054b525dced1a0c66aa95a144153, 08a1ddab6df7d3c7b6341774cb1cf4b21b96a214 to before ab140365fb62c0bdab22b2f516aff563b2559e3b
Linux

Linux · 3.10
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/block/drbd/drbd_actlog.c, drivers/block/drbd/drbd_interval.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.