CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-23462: linux kernel from 3.10 (inclusive), before 5.10.253 (exclusive), from 5.11 (inclusive), before 5.15.203 (exclusive)…

CVE-2026-23462. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00262 (percentile 0.168), scored 15-Oct-2026.

Affected technology

linux kernel · from 3.10 (inclusive), before 5.10.253 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.203 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.167 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.130 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.78 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.20 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 6.19.10 (exclusive)
linux

linux kernel · 7.0 · update rc1
linux

linux kernel · 7.0 · update rc2
linux

linux kernel · 7.0 · update rc3
linux

linux kernel · 7.0 · update rc4
linux

Linux · b4f34d8d9d26b2428fa7cf7c8f97690a297978e6 to before d955ccbf91ab74d76fe9e4eab2846a7d8a173075, b4f34d8d9d26b2428fa7cf7c8f97690a297978e6 to before 18b1263ece6431bd78fa6b61faaef5281203741c, b4f34d8d9d26b2428fa7cf7c8f97690a297978e6 to before 21a47a119f33df9bb157326846390d7e8e1b45ba, b4f34d8d9d26b2428fa7cf7c8f97690a297978e6 to before 45ebe5b900200ac3e01f3470506a44a447825721, b4f34d8d9d26b2428fa7cf7c8f97690a297978e6 to before 7c805b7d1e580eececcc92470292e3dbc42bc3f5, b4f34d8d9d26b2428fa7cf7c8f97690a297978e6 to before f8b6ed2f06d3baa44f347a0fa2af52433f386463, b4f34d8d9d26b2428fa7cf7c8f97690a297978e6 to before 4d37fa7582aa960ba23e10a7a2596a29f37ad281, b4f34d8d9d26b2428fa7cf7c8f97690a297978e6 to before dbf666e4fc9bdd975a61bf682b3f75cb0145eedd
Linux

Linux · 3.10
Linux

Component: Not specified by the source
File: net/bluetooth/hidp/core.c

Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CWE
CWE-416
CCR priority
35.3 /100 (P4)
CVSS 3.1
8.8 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
EPSS
0.00262 · percentile 0.168 · 2026-10-15
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-23462.html