P4Verified

CVE-2026-23391: linux kernel 3.4; +5 more affected products

CVE-2026-23391 affects cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00128 (percentile 0.022), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.4.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 3.4
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 24de58f465165298aaa8f286b2592f0163706cfe to before 55445134d42b84cb0a272e42c98d233ca65eca83, 24de58f465165298aaa8f286b2592f0163706cfe to before cc57506dd66555899560b9c0f24e813f034e12ec, 24de58f465165298aaa8f286b2592f0163706cfe to before d2d0bae0c9a2a17b6990a2966f5cdce0813d6256, 24de58f465165298aaa8f286b2592f0163706cfe to before 63b8097cea1923fe82cd598068d0796da8c015ec, 24de58f465165298aaa8f286b2592f0163706cfe to before 19a230dec6bb8928e3f96387f9085cf2c79bcef9, 24de58f465165298aaa8f286b2592f0163706cfe to before cb549925875fa06dd155e49db4ac2c5044c30f9c, 24de58f465165298aaa8f286b2592f0163706cfe to before 777d02efe3d630cca4c1b63962cec17c57711325, 24de58f465165298aaa8f286b2592f0163706cfe to before f62a218a946b19bb59abdd5361da85fa4606b96b
Linux

Linux · 3.4
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
File: net/netfilter/xt_CT.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 15-Oct-2026 09:20 UTC

Product: cbl2 kernel 5.15.202.1-1 on CBL Mariner 2.0
CCR priority: 31.2 /100 (P4)
CVSS 3.1: 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00128 · percentile 0.022 · 2026-10-14
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
Microsoft MSRC Security Update Guide (CVRF) · Source record · observed 2026-10-04 07:08:49.022374+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23391.html