CVE-2026-23396: linux kernel 2.6.26; +2 more affected products

Affected technology

linux kernel · from 2.6.26.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 2.6.26
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 2e3c8736820bf72a8ad10721c7e31d36d4fa7790 to before 14a4fd13657a3f2489db6566f081adfb27a49c64, 2e3c8736820bf72a8ad10721c7e31d36d4fa7790 to before 74de6fa472b03bc8cde0a081484e9960bcbda568, 2e3c8736820bf72a8ad10721c7e31d36d4fa7790 to before c1e3f2416fb27c816ce96d747d3e784e31f4d95c, 2e3c8736820bf72a8ad10721c7e31d36d4fa7790 to before 0a4da176ae4b4e075a19c00d3e269cfd5e05a813, 2e3c8736820bf72a8ad10721c7e31d36d4fa7790 to before a90279e7f7ea0b7e923a1c5ebee9a6b78b6d1004, 2e3c8736820bf72a8ad10721c7e31d36d4fa7790 to before 44699c6cdfce80a0f296b54ae9314461e3e41b3d, 2e3c8736820bf72a8ad10721c7e31d36d4fa7790 to before 7c55a3deaf7eaaafa2546f8de7fed19382a0a116, 2e3c8736820bf72a8ad10721c7e31d36d4fa7790 to before c73bb9a2d33bf81f6eecaa0f474b6c6dbe9855bd
Linux

Linux · 2.6.26
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: net/mac80211/mesh.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

An adjacent attacker can exploit this by sending a crafted CSA action frame that includes a valid Mesh ID IE but omits the Mesh Configuration IE, crashing the kernel. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.