CVE-2026-23307

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.12% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 2.5% of scored records. A rank, not a probability.

NVD base score

5.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-03-25 10:27Z5 MO AGO

Last updated

2026-05-11 22:04Z3 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-805Buffer Access with Incorrect Length ValueBase

Data version

5.2

Document digest

816d72d8e14afa46039e50ea30380e09ba04c940325f3ed5a726609de603e731

• git.kernel.orghttps://git.kernel.org/stable/c/aed172a2e2330131f0977d2acd3ec8883f413ec1
• git.kernel.orghttps://git.kernel.org/stable/c/f10177e6c4575aedaea580ce67d792fab7a2235e
• git.kernel.orghttps://git.kernel.org/stable/c/c703bbf8e9b4947e111c88d2ed09236a6772a471
• git.kernel.orghttps://git.kernel.org/stable/c/1818974e1b5ef200e27f144c8cb8a246420bb54d
• git.kernel.orghttps://git.kernel.org/stable/c/18f75b9cbdc3703f15965425ab69dee509b07785
• git.kernel.orghttps://git.kernel.org/stable/c/1cf469026d4a2308eaa91d04dca4a900d07a5c2e
• git.kernel.orghttps://git.kernel.org/stable/c/2833e13e2b099546abf5d40a483b4eb04ddd1f7b
• git.kernel.orghttps://git.kernel.org/stable/c/38a01c9700b0dcafe97dfa9dc7531bf4a245deff