CVE-2026-23440: linux kernel 6.4; +1 more affected products

Affected technology

linux kernel · from 6.4.1 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 6.4
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · fef06678931ff67b158d337b581e5cf5ca40a3a3 to before 3dffc083292e6872787bd7e34b957627622f9af4, fef06678931ff67b158d337b581e5cf5ca40a3a3 to before 2051c709dce92da3550040aa7949cd5a9c89b14e, fef06678931ff67b158d337b581e5cf5ca40a3a3 to before 96c9c25b74686ac2de15921c9ad30c5ef13af8cd, fef06678931ff67b158d337b581e5cf5ca40a3a3 to before 8d625c15471fb8780125eaef682983a96af77bdc, fef06678931ff67b158d337b581e5cf5ca40a3a3 to before beb6e2e5976a128b0cccf10d158124422210c5ef
Linux

Linux · 6.4
Linux

Component: Not specified by the source
Function: temporarily
File: drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_offload.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.