CVE-2026-23190

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.11% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 1.8% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-02-14 16:27Z6 MO AGO

Last updated

2026-05-11 22:02Z3 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-401Missing Release of Memory after Effective LifetimeVariant
• CWE-772Missing Release of Resource after Effective LifetimeBase

Data version

5.2

Document digest

5d76f42ba1144c5294f5ba4d74756f61504a92d135b57541d3d7d791871ab731

• git.kernel.orghttps://git.kernel.org/stable/c/9f23800c7eed06cb8ccae8a225f5e3d421b0d4cc
• git.kernel.orghttps://git.kernel.org/stable/c/d7ead6512650447a4cd6db774a2379acb259650c
• git.kernel.orghttps://git.kernel.org/stable/c/6d33640404968fe9f14a1252b337362b62fff490
• git.kernel.orghttps://git.kernel.org/stable/c/0e0120214b5dcb0bf6b2171bb4e68e38968b2861
• git.kernel.orghttps://git.kernel.org/stable/c/c9c14d2abe4c5546fcd3a7347fadc4aad2b308d8
• git.kernel.orghttps://git.kernel.org/stable/c/279cb9180510f7e13c3a4dfde8c16a8fbc7c5709
• git.kernel.orghttps://git.kernel.org/stable/c/7f67ba5413f98d93116a756e7f17cd2c1d6c2bd6