01 Record

CVE-2026-23236

fbdev: smscufx: properly copy ioctl memory to kernelspace

HighPUBLISHEDCNA: Linux

CNA base score7.3 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

View raw JSON

02 Description

fbdev: smscufx: properly copy ioctl memory to kernelspace

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.21% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 10.8% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-03-04 14:36Z6 MO AGO

Last updated

2026-08-05 12:20Z1 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.3)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Weaknesses

CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionBase

Data version

5.2

Document digest

7c02f27eb51eb0e35c1e4bc7333430bde22847e9110efd85856d882dac319d4e

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux3c8a63e22a0802fd56380f6ab305b419f18eb6f5 to < 061cfeb560aa3ddc174153dbe5be9d0b55eb7248, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 to < 6167af934f956d3ae1e06d61f45cd0d1004bbe1a, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 to < a0321e6e58facb39fe191caa0e52ed9aab6a48fe, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 to < 0634e8d650993602fc5b389ff7ac525f6542e141, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 to < 52917e265aa5f848212f60fc50fc504d8ef12866, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 to < 1c008ad0f0d1c1523902b9cdb08e404129677bfc, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 to < f1e91bd4efeae48b0f42caed7e8ce2e3a0d05b02, 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 to < 120adae7b42faa641179270c067864544a50ab69, 3.2—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/061cfeb560aa3ddc174153dbe5be9d0b55eb7248
git.kernel.orghttps://git.kernel.org/stable/c/6167af934f956d3ae1e06d61f45cd0d1004bbe1a
git.kernel.orghttps://git.kernel.org/stable/c/a0321e6e58facb39fe191caa0e52ed9aab6a48fe
git.kernel.orghttps://git.kernel.org/stable/c/0634e8d650993602fc5b389ff7ac525f6542e141
git.kernel.orghttps://git.kernel.org/stable/c/52917e265aa5f848212f60fc50fc504d8ef12866
git.kernel.orghttps://git.kernel.org/stable/c/1c008ad0f0d1c1523902b9cdb08e404129677bfc
git.kernel.orghttps://git.kernel.org/stable/c/f1e91bd4efeae48b0f42caed7e8ce2e3a0d05b02
git.kernel.orghttps://git.kernel.org/stable/c/120adae7b42faa641179270c067864544a50ab69
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-253495.html

01 Record index

CVE-2026-23236

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-23236

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References