CVE-2026-23444: linux kernel 3.13; +2 more affected products

Affected technology

linux kernel · from 3.13.1 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 3.13
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

linux kernel · 7.0 · update rc5
linux

linux kernel · 7.0 · update rc6
linux

linux kernel · 7.0 · update rc7
linux

Linux · 06be6b149f7e406bcf16098567f5a6c9f042bced to before 905ef207d5ed99ca64adfe39fba9ac46e434327a, 06be6b149f7e406bcf16098567f5a6c9f042bced to before 5ef8ca1c164786da24169af155c1ca1ff1353cf8, 06be6b149f7e406bcf16098567f5a6c9f042bced to before 9a779d1f480e83720b5384adf165604e7ee226bd, 06be6b149f7e406bcf16098567f5a6c9f042bced to before f77b51bcee7be2bb686b5f7a2d4a1921e4bdb9f4, 06be6b149f7e406bcf16098567f5a6c9f042bced to before 3b4d27acafaeab478fd24f79ad6e593a892828b9, 06be6b149f7e406bcf16098567f5a6c9f042bced to before 06e769dddcbeb3baf2ce346273b53dd61fdbecf4, 06be6b149f7e406bcf16098567f5a6c9f042bced to before 50f1b690b4868923fbd242298def2fb88662f108, 06be6b149f7e406bcf16098567f5a6c9f042bced to before d5ad6ab61cbd89afdb60881f6274f74328af3ee9
Linux

Linux · 3.13
Linux

SIMATIC S7-1500 TM MFP - GNU/Linux subsystem · 0 to before *
Siemens

Component: Not specified by the source
File: drivers/net/wireless/ath/ath9k/channel.c, drivers/net/wireless/mediatek/mt76/scan.c, drivers/net/wireless/virtual/mac80211_hwsim.c, include/net/mac80211.h, net/mac80211/tx.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.