01 Record

CVE-2026-23414

tls: Purge async_hold in tls_decrypt_async_wait()

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

tls: Purge async_hold in tls_decrypt_async_wait()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.24% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 15.7% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-14.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-04-02 11:40Z5 MO AGO

Last updated

2026-08-05 12:21Z1 MO AGO

Reserved

2026-01-13

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant
CWE-911Improper Update of Reference CountBase

Data version

5.2

Document digest

1f63f34e47f1382823902b79cc7daf01d45bb3403c4b0468e1d1fda77571c080

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux9f83fd0c179e0f458e824e417f9d5ad53443f685 to < ac435be7c7613eb13a5a8ceb5182e10b50c9ce87, c61d4368197d65c4809d9271f3b85325a600586a to < 2dcf324855c34e7f934ce978aa19b645a8f3ee71, 39dec4ea3daf77f684308576baf483b55ca7f160 to < 6dc11e0bd0a5466bcc76d275c09e5537bd0597dd, b8a6ff84abbcbbc445463de58704686011edc8e1 to < 9f557c7eae127b44d2e863917dc986a4b6cb1269, b8a6ff84abbcbbc445463de58704686011edc8e1 to < fd8037e1f18ca5336934d0e0e7e1a4fe097e749d, b8a6ff84abbcbbc445463de58704686011edc8e1 to < 84a8335d8300576f1b377ae24abca1d9f197807f, 4fc109d0ab196bd943b7451276690fb6bb48c2e0, 6.1.158 to < 6.1.168, 6.6.114 to < 6.6.131, 6.12.55 to < 6.12.80, 6.17.5 to < 6.18, 6.18—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/ac435be7c7613eb13a5a8ceb5182e10b50c9ce87
git.kernel.orghttps://git.kernel.org/stable/c/2dcf324855c34e7f934ce978aa19b645a8f3ee71
git.kernel.orghttps://git.kernel.org/stable/c/6dc11e0bd0a5466bcc76d275c09e5537bd0597dd
git.kernel.orghttps://git.kernel.org/stable/c/9f557c7eae127b44d2e863917dc986a4b6cb1269
git.kernel.orghttps://git.kernel.org/stable/c/fd8037e1f18ca5336934d0e0e7e1a4fe097e749d
git.kernel.orghttps://git.kernel.org/stable/c/84a8335d8300576f1b377ae24abca1d9f197807f
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

01 Record index

CVE-2026-23414

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-23414

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References