CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-23439: linux kernel 3.18; +4 more affected products

CVE-2026-23439. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00129 (percentile 0.02228), scored 14-Oct-2026.

Affected technology

linux kernel · from 3.18.1 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 3.18
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before dfc96ae0074cc47b5478a59e5aa19233e434243f, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before 66117dbb3dbae82f86735bf727b1d59cc677afa1, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before ba7c9ddcdd077942b798979edb035207374d4096, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before a05a2149386f6dfb4245f522acdbef892acafc84, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before 9f036aa0fe46c19e938f03d10e02c23f4fffae5e, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before 003343985f26dfefd0c94b1fe1316a2de74428b9, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before 12aa4b73a67d95bc739995a2d6943aec2f9785c9, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before b3a6df291fecf5f8a308953b65ca72b7fc9e015d
Linux

Linux · 3.18
Linux

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens

Component: Not specified by the source
Function: returns, and
File: include/net/udp_tunnel.h

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source says there is only one caller of the vulnerable function and only privileged users can trigger it. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.

Published

CWE
CWE-476
CCR priority
22.0 /100 (P4)
CVSS 3.1
5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS
0.00129 · percentile 0.02228 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23439.html