CVE-2026-23382: linux kernel 2.6.35; +2 more affected products

Affected technology

linux kernel · from 2.6.35.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.77 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.17 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.7 (exclusive)
linux

linux kernel · 2.6.35
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · d0742abaa1c396a26bb3d3ce2732988cd3faa020 to before b48284d7f0f76023b215a3409cdc989b5081eadf, d0742abaa1c396a26bb3d3ce2732988cd3faa020 to before de316c1edf15bc30ff5e0d4c7b37c70fd41cf319, d0742abaa1c396a26bb3d3ce2732988cd3faa020 to before ac83b0d91a3f4f0c012ba9c85fb99436cddb1208, d0742abaa1c396a26bb3d3ce2732988cd3faa020 to before 6e330889e6c8db99f04d4feb861d23de4e8fbb13, d0742abaa1c396a26bb3d3ce2732988cd3faa020 to before 892dbaf46bb738dacf1fa663eadb3712c85868f0, d0742abaa1c396a26bb3d3ce2732988cd3faa020 to before 20864e3e41c74cda253a9fa6b6fe093c1461a6a9, d0742abaa1c396a26bb3d3ce2732988cd3faa020 to before 575122cd6569c4c4aa13c4c9958fea506724c788, d0742abaa1c396a26bb3d3ce2732988cd3faa020 to before ecfa6f34492c493a9a1dc2900f3edeb01c79946b
Linux

Linux · 2.6.35
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/hid/hid-cmedia.c, drivers/hid/hid-creative-sb0540.c, drivers/hid/hid-zydacron.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.