Get real-time updates on Telegram
CVE-2026-23439: linux kernel 3.18; +4 more affected products
CVE-2026-23439. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.00129 (percentile 0.02228), scored 14-Oct-2026.
Affected technology
linux kernel · from 3.18.1 (inclusive), before 5.10.253 (exclusive)
linux
linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux
linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux
linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux
linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux
linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux
linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux
linux kernel · 3.18
linux
linux kernel · 7.0 · update rc1
linux
linux kernel · 7.0 · update rc2
linux
linux kernel · 7.0 · update rc3
linux
linux kernel · 7.0 · update rc4
linux
linux kernel · 7.0 · update rc5
linux
linux kernel · 7.0 · update rc6
linux
linux kernel · 7.0 · update rc7
linux
Linux · fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before dfc96ae0074cc47b5478a59e5aa19233e434243f, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before 66117dbb3dbae82f86735bf727b1d59cc677afa1, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before ba7c9ddcdd077942b798979edb035207374d4096, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before a05a2149386f6dfb4245f522acdbef892acafc84, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before 9f036aa0fe46c19e938f03d10e02c23f4fffae5e, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before 003343985f26dfefd0c94b1fe1316a2de74428b9, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before 12aa4b73a67d95bc739995a2d6943aec2f9785c9, fd384412e199b62c3ddaabd18dce86d0e164c5b9 to before b3a6df291fecf5f8a308953b65ca72b7fc9e015d
Linux
Linux · 3.18
Linux
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.7 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.7 to before *
Siemens
Component: Not specified by the source
Function: returns, and
File: include/net/udp_tunnel.h
Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
The source says there is only one caller of the vulnerable function and only privileged users can trigger it. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high.
- CWE
- CWE-476
- CCR priority
- 22.0 /100 (P4)
- CVSS 3.1
- 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
- EPSS
- 0.00129 · percentile 0.02228 · 2026-10-14
- KEV
- no
Provenance
- FIRST EPSS daily exploit-probability · Source record · observed 2026-10-15 09:24:28.011626+00:00 UTC
- GitHub Advisory Database · Source record · observed 2026-10-15 10:43:56.988652+00:00 UTC
- NVD CVE API 2.0 · Source record · observed 2026-10-15 09:18:22.406219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-23439.html