CVE-2026-23395: linux kernel 5.7; +2 more affected products

Affected technology

linux kernel · from 5.7.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 5.7
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 15f02b91056253e8cdc592888f431da0731337b8 to before 10a7a702542240d5edb2b39450ac951c59ccd009, 15f02b91056253e8cdc592888f431da0731337b8 to before 46e5b71666fb7652082e4e214a3365f4b14f1dc3, 15f02b91056253e8cdc592888f431da0731337b8 to before fb4a3a26483f3ea2cd21c7a2f7c45d5670600465, 15f02b91056253e8cdc592888f431da0731337b8 to before 2124d82fd25e1671bb3ceb37998af5aae5903e06, 15f02b91056253e8cdc592888f431da0731337b8 to before 6b949a6b33cbdf621d9fc6f0c48ac00915dbf514, 15f02b91056253e8cdc592888f431da0731337b8 to before 8d0d94f8ba5b3a0beec3b0da558b9bea48018117, 15f02b91056253e8cdc592888f431da0731337b8 to before e72ee455297b794b852e5cea8d2d7bb17312172a, 15f02b91056253e8cdc592888f431da0731337b8 to before 5b3e2052334f2ff6d5200e952f4aa66994d09899
Linux

Linux · 5.7
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/bluetooth/l2cap_core.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.