Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2026-23361: Linux kernel PCI driver can corrupt host memory
CVE-2026-23361 · published 7 months ago
Summary
The Linux kernel’s PCI driver may write to the wrong place when it tries to send an interrupt, which can damage memory on the host system. This issue affects Debian and several Ubuntu kernel packages. Install the latest kernel updates from your distribution to apply the fix.
What to do
- Update debian linux to version 6.19.8-1.
- Update canonical linux-aws-6.8 to version 6.8.0-1061.64~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1063.71~22.04.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1062.69~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1064.72~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-136.136~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1061.62~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-136.136.2~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1059.62~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1058.61~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-136.136~22.04.3.
- Update canonical linux-realtime-6.8 to version 6.8.1-1056.57~22.04.2.
- Update canonical linux to version 6.8.0-136.136.
- Update canonical linux-aws to version 6.8.0-1061.64.
- Update canonical linux-azure to version 6.8.0-1063.71.
- Update canonical linux-azure-fde to version 6.8.0-1062.69.
- Update canonical linux-gcp to version 6.8.0-1064.72.
- Update canonical linux-gke to version 6.8.0-1059.67.
- Update canonical linux-gkeop to version 6.8.0-1046.50.
- Update canonical linux-ibm to version 6.8.0-1061.62.
- Update canonical linux-lowlatency to version 6.8.0-136.136.2.
- Update canonical linux-nvidia to version 6.8.0-1059.62.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1059.62.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1030.31.
- Update canonical linux-oracle to version 6.8.0-1058.61.
- Update canonical linux-xilinx to version 6.8.0-1033.34.
- Update canonical linux-aws-fips to version 6.8.0-1061.64+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1063.71+fips2.
- Update canonical linux-fips to version 6.8.0-136.136+fips2.
- Update debian rootio-linux to version 6.12.74-2.root.io.102.
- Update debian rootio-linux to version 6.1.164-1.root.io.112.
- Update debian rootio-linux to version 6.1.164-1.root.io.114.
- Update linux kernel to version 6.19.7.
- Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
- Update canonical linux-raspi to version 6.8.0-1061.65.
- Update canonical linux-raspi-realtime to version 6.8.0-2050.52.
- Update canonical linux-gcp-fips to version 6.8.0-1064.72+fips1.
- Update canonical linux-realtime to version 6.8.1-1056.57.
- Update debian rootio-linux to version 5.10.251-1.root.io.66.
- Update debian rootio-linux to version 6.12.74-2.root.io.106.
- Update debian linux to version 6.12.101-1.aikido.157.
- Update debian rootio-linux to version 6.12.101-1.aikido.157.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.82.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update canonical linux-bluefield to version 6.8.0-1028.33.
- Update debian linux to version 6.12.85-1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update bellsoft linux-lts to version 6.1.191-r0.
- Update bellsoft linux-lts to version 6.12.80-r0.
- Update bellsoft linux-lts to version 6.18.35-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:14 | debian | linux |
< 6.19.8-1 Fix: upgrade to 6.19.8-1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
Showing 50 of 238. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1061.64~22.04.1 Fix: upgrade to 6.8.0-1061.64~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1063.71~22.04.1 Fix: upgrade to 6.8.0-1063.71~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1062.69~22.04.1 Fix: upgrade to 6.8.0-1062.69~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1064.72~22.04.1 Fix: upgrade to 6.8.0-1064.72~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-136.136~22.04.1 Fix: upgrade to 6.8.0-136.136~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1061.62~22.04.1 Fix: upgrade to 6.8.0-1061.62~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg | All versions |
| Ubuntu:22.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-136.136.2~22.04.1 Fix: upgrade to 6.8.0-136.136.2~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1059.62~22.04.1 Fix: upgrade to 6.8.0-1059.62~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1058.61~22.04.1 Fix: upgrade to 6.8.0-1058.61~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-136.136~22.04.3 Fix: upgrade to 6.8.0-136.136~22.04.3
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1056.57~22.04.2 Fix: upgrade to 6.8.1-1056.57~22.04.2
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-136.136 Fix: upgrade to 6.8.0-136.136
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1061.64 Fix: upgrade to 6.8.0-1061.64
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1063.71 Fix: upgrade to 6.8.0-1063.71
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1062.69 Fix: upgrade to 6.8.0-1062.69
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1064.72 Fix: upgrade to 6.8.0-1064.72
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1059.67 Fix: upgrade to 6.8.0-1059.67
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1046.50 Fix: upgrade to 6.8.0-1046.50
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1061.62 Fix: upgrade to 6.8.0-1061.62
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-136.136.2 Fix: upgrade to 6.8.0-136.136.2
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1059.62 Fix: upgrade to 6.8.0-1059.62
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1059.62.1 Fix: upgrade to 6.8.0-1059.62.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1030.31 Fix: upgrade to 6.8.0-1030.31
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1058.61 Fix: upgrade to 6.8.0-1058.61
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1061.65 Fix: upgrade to 6.8.0-1061.65
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1033.34 Fix: upgrade to 6.8.0-1033.34
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1028.33 Fix: upgrade to 6.8.0-1028.33
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1061.64+fips1 Fix: upgrade to 6.8.0-1061.64+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1063.71+fips2 Fix: upgrade to 6.8.0-1063.71+fips2
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-136.136+fips2 Fix: upgrade to 6.8.0-136.136+fips2
|
| Debian:11 | debian | linux | All versions |
| Debian:12 | debian | linux | All versions |
| Debian:13 | debian | linux |
< 6.12.85-1 Fix: upgrade to 6.12.85-1
|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.74-2.root.io.102 < 6.12.74-2.root.io.106 < 6.12.101-1.aikido.157 Fix: upgrade to 6.12.74-2.root.io.102
|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.164-1.root.io.112 < 6.1.164-1.root.io.114 Fix: upgrade to 6.1.164-1.root.io.112
|
| Linux | linux | kernel |
>= 6.19.0, < 6.19.7 Fix: upgrade to 6.19.7
|
| – | linux | linux_kernel |
>= 4.19.1, < 6.12.77 >= 6.13, < 6.18.17 >= 6.19, < 6.19.7 4.19 7.0 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-134.134.root.io.80 < 6.8.0-136.136.root.io.82 < 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-134.134.root.io.80
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2050.52 Fix: upgrade to 6.8.0-2050.52
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1064.72+fips1 Fix: upgrade to 6.8.0-1064.72+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1056.57 Fix: upgrade to 6.8.1-1056.57
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:25.10 | canonical | linux | All versions |
| Ubuntu:25.10 | canonical | linux-aws | All versions |
| Ubuntu:25.10 | canonical | linux-azure | All versions |
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:25.10 | canonical | linux-gcp | All versions |
| Ubuntu:25.10 | canonical | linux-oracle | All versions |
| Ubuntu:25.10 | canonical | linux-raspi | All versions |
| Ubuntu:25.10 | canonical | linux-realtime | All versions |
| Ubuntu:25.10 | canonical | linux-riscv | All versions |
| Root:Debian:11 | debian | rootio-linux |
< 5.10.251-1.root.io.66 Fix: upgrade to 5.10.251-1.root.io.66
|
| Root:Debian:13 | debian | linux |
< 6.12.101-1.aikido.157 Fix: upgrade to 6.12.101-1.aikido.157
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 | All versions |
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| – | linux | linux |
< 5e2fc90018635fc982d39f8c11cd3b368fdaf3b7 4.19 < 1d35fc94cd723ae27371a31f404685a24b097d71 |
| Alpaquita:23 | bellsoft | linux-lts |
>= 6.1.189-r0, < 6.1.191-r0 Fix: upgrade to 6.1.191-r0
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.74-r0, < 6.12.80-r0 Fix: upgrade to 6.12.80-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.92-r1, < 6.18.35-r1 Fix: upgrade to 6.18.35-r1
|
Original advisory text
BELL-CVE-2026-23361
In the Linux kernel, the following vulnerability has been resolved:
PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
Endpoint drivers use dw_pcie_ep_raise_msix_irq() to raise an MSI-X
interrupt to the host using a writel(), which generates a PCI posted write
transaction. There's no completion for posted writes, so the writel() may
return before the PCI write completes. dw_pcie_ep_raise_msix_irq() also
unmaps the outbound ATU entry used for the PCI write, so the write races
with the unmap.
If the PCI write loses the race with the ATU unmap, the write may corrupt
host memory or cause IOMMU errors, e.g., these when running fio with a
larger queue depth against nvmet-pci-epf:
arm-smmu-v3 fc900000.iommu: 0x0000010000000010
arm-smmu-v3 fc900000.iommu: 0x0000020000000000
arm-smmu-v3 fc900000.iommu: 0x000000090000f040
arm-smmu-v3 fc900000.iommu: 0x0000000000000000
arm-smmu-v3 fc900000.iommu: event: F_TRANSLATION client: 0000:01:00.0 sid: 0x100 ssid: 0x0 iova: 0x90000f040 ipa: 0x0
arm-smmu-v3 fc900000.iommu: unpriv data write s1 "Input address caused fault" stag: 0x0
Flush the write by performing a readl() of the same address to ensure that
the write has reached the destination before the ATU entry is unmapped.
The same problem was solved for dw_pcie_ep_raise_msi_irq() in commit
8719c64e76bf ("PCI: dwc: ep: Cache MSI outbound iATU mapping"), but there
it was solved by dedicating an outbound iATU only for MSI. We can't do the
same for MSI-X because each vector can have a different msg_addr and the
msg_addr may be changed while the vector is masked.
[bhelgaas: commit log]
PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry
Endpoint drivers use dw_pcie_ep_raise_msix_irq() to raise an MSI-X
interrupt to the host using a writel(), which generates a PCI posted write
transaction. There's no completion for posted writes, so the writel() may
return before the PCI write completes. dw_pcie_ep_raise_msix_irq() also
unmaps the outbound ATU entry used for the PCI write, so the write races
with the unmap.
If the PCI write loses the race with the ATU unmap, the write may corrupt
host memory or cause IOMMU errors, e.g., these when running fio with a
larger queue depth against nvmet-pci-epf:
arm-smmu-v3 fc900000.iommu: 0x0000010000000010
arm-smmu-v3 fc900000.iommu: 0x0000020000000000
arm-smmu-v3 fc900000.iommu: 0x000000090000f040
arm-smmu-v3 fc900000.iommu: 0x0000000000000000
arm-smmu-v3 fc900000.iommu: event: F_TRANSLATION client: 0000:01:00.0 sid: 0x100 ssid: 0x0 iova: 0x90000f040 ipa: 0x0
arm-smmu-v3 fc900000.iommu: unpriv data write s1 "Input address caused fault" stag: 0x0
Flush the write by performing a readl() of the same address to ensure that
the write has reached the destination before the ATU entry is unmapped.
The same problem was solved for dw_pcie_ep_raise_msi_irq() in commit
8719c64e76bf ("PCI: dwc: ep: Cache MSI outbound iATU mapping"), but there
it was solved by dedicating an outbound iATU only for MSI. We can't do the
same for MSI-X because each vector can have a different msg_addr and the
msg_addr may be changed while the vector is masked.
[bhelgaas: commit log]
References
- https://ubuntu.com/security/notices/USN-8567-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8574-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8574-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8596-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8607-1 Vendor Advisory
- https://git.kernel.org/stable/c/5e2fc90018635fc982d39f8c11cd3b368fdaf3b7 URL
- https://ubuntu.com/security/CVE-2026-23361 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-23361 Third Party Advisory
- https://git.kernel.org/linus/c22533c66ccae10511ad6a7afc34bb26c47577e3 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8595-1 Vendor Advisory
- https://git.kernel.org/stable/c/1d35fc94cd723ae27371a31f404685a24b097d71 URL
- https://git.kernel.org/stable/c/6f60a783860c77b309f7d81003b6a0c73feca49e URL
- https://git.kernel.org/stable/c/a7afb8f810c04845fdfc58c57d9cf0cc5f23ced0 URL
- https://git.kernel.org/stable/c/c22533c66ccae10511ad6a7afc34bb26c47577e3 URL
- https://ubuntu.com/security/notices/USN-8595-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8606-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8608-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8609-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8574-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8595-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8619-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8665-1 Vendor Advisory
- https://git.kernel.org/stable/c/eaa6a56801ddd2d9b4980f19e7fe002b00994804 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23361... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-23361 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-23361 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://docs.bell-sw.com/security/cves/CVE-2026-23361 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
7.8
High
Type
CWE-787Out-of-bounds Write
Timeline
Published26 Mar 2026
Updated4 Nov 2026
First seen25 Mar 2026
Sources
CVE-2026-23361 · NVD
DEBIAN-CVE-2026-23361 · OSV
CVE-2026-23361 · OSV
UBUNTU-CVE-2026-23361 · OSV
CVE-2026-23361 · MITRE
BELL-CVE-2026-23361 · OSV
Track software like this
Free during beta