CVE-2026-23428: linux kernel 6.4; +1 more affected products

Affected technology

linux kernel · from 5.15.121 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 6.1.36 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.3.10 (inclusive), before 6.4 (exclusive)
linux

linux kernel · from 6.4.1 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 6.4
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · eb947403518ea3d93f6d89264bb1f5416bb0c7d0 to before d08417981155883068b7260d9500ca306a03edac, 854156d12caa9d36de1cf5f084591c7686cc8a9d to before eae0dc86f71e6f3294c0cd7ffc05039258d243af, 5005bcb4219156f1bf7587b185080ec1da08518e to before 806f13752652216db0c309392b4db3e64eeed4f2, 5005bcb4219156f1bf7587b185080ec1da08518e to before c742b46a153d3ff95ff0825ab1950c87b9e14470, 5005bcb4219156f1bf7587b185080ec1da08518e to before 7f7468fd2a7554cea91b7d430335a3dbf01dcc09, 5005bcb4219156f1bf7587b185080ec1da08518e to before a5929c2020ce54e1dcbd1078c0f30b8aaf73c105, 5005bcb4219156f1bf7587b185080ec1da08518e to before c33615f995aee80657b9fdfbc4ee7f49c2bd733d, d1066c1b3663401cd23c0d6e60cdae750ce00c0f, 5.15.121 to before 5.15.203, 6.1.36 to before 6.1.167, 6.3.10 to before 6.4
Linux

Linux · 6.4
Linux

Component: Not specified by the source
File: fs/smb/server/smb2pdu.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.