CVE-2026-23096

Updated on 04 Feb 2026

Severity

5.5 Medium severity

Details

CVSS score
5.5
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

uacce: fix cdev handling in the cleanup path

When cdev_device_add fails, it internally releases the cdev memory, and if cdev_device_del is then executed, it will cause a hang error. To fix it, we check the return value of cdev_device_add() and clear uacce->cdev to avoid calling cdev_device_del in the uacce_remove.

Details

Affected packages:
linux @ 5.4.0 (+3 more)

Fixes

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 11 Will Not Fix
Debian 11 cloud Will Not Fix
Debian 12 Planned
Debian 13 Planned
Ubuntu 22.04 Planned
Ubuntu 22.04 AWS Planned
Ubuntu 24.04 Planned
Ubuntu 24.04 AWS Planned