Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2026-23427: Linux kernel could let attackers run code
CVE-2026-23427 · published 6 days ago
Summary
Certain versions of the Linux kernel can be tricked into running malicious code, which could let an attacker take control of the system. The problem has been fixed in multiple newer kernel releases for Debian 13 and related Linux distributions. Install the latest kernel updates from your provider as soon as possible to stay protected.
What to do
- Update debian linux to version 6.19.10-1.
- Update bellsoft linux-lts to version 6.12.80-r0.
- Update canonical linux-aws-6.17 to version 6.17.0-1019.19~24.04.1.
- Update canonical linux-azure-6.17 to version 6.17.0-1021.21~24.04.1.
- Update canonical linux-gcp-6.17 to version 6.17.0-1020.22~24.04.1.
- Update canonical linux-hwe-6.17 to version 6.17.0-40.40~24.04.1.
- Update canonical linux-nvidia-6.17 to version 6.17.0-1026.26.
- Update canonical linux-oem-6.17 to version 6.17.0-1028.28.
- Update canonical linux-oracle-6.17 to version 6.17.0-1018.18~24.04.1.
- Update canonical linux-realtime-6.17 to version 6.17.0-1017.19~24.04.1.
- Update canonical linux to version 6.17.0-40.40.
- Update canonical linux-aws to version 6.17.0-1019.19.
- Update canonical linux-gcp to version 6.17.0-1020.22.
- Update canonical linux-oracle to version 6.17.0-1018.18.
- Update canonical linux-raspi to version 6.17.0-1021.21.
- Update canonical linux-realtime to version 6.17.0-1017.19.
- Update canonical linux-riscv to version 6.17.0-40.40.1.
- Update debian rootio-linux to version 6.12.74-2.root.io.110.
- Update debian rootio-linux to version 6.12.94-1.root.io.141.
- Update debian linux to version 6.12.85-1.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux kernel to version 6.19.10.
- Update linux linux to version b0158d9d6f4ec5941e49a0b812735db2844f9975 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 6.9.1, < 6.12.78 >= 6.13, < 6.18.20 >= 6.19, < 6.19.10 7.0 >= 6.6.32, < 6.6.130 6.9 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | linux | linux |
< b0158d9d6f4ec5941e49a0b812735db2844f9975 6.9 |
| Debian:13 | debian | linux |
< 6.12.85-1 Fix: upgrade to 6.12.85-1
|
| Debian:14 | debian | linux |
< 6.19.10-1 Fix: upgrade to 6.19.10-1
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.74-r0, < 6.12.80-r0 Fix: upgrade to 6.12.80-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.76-r0, < 6.12.80-r0 Fix: upgrade to 6.12.80-r0
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
Showing 50 of 121. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 |
< 6.17.0-1019.19~24.04.1 Fix: upgrade to 6.17.0-1019.19~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 |
< 6.17.0-1021.21~24.04.1 Fix: upgrade to 6.17.0-1021.21~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 |
< 6.17.0-1020.22~24.04.1 Fix: upgrade to 6.17.0-1020.22~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 |
< 6.17.0-40.40~24.04.1 Fix: upgrade to 6.17.0-40.40~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 |
< 6.17.0-1026.26 Fix: upgrade to 6.17.0-1026.26
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 |
< 6.17.0-1028.28 Fix: upgrade to 6.17.0-1028.28
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 |
< 6.17.0-1018.18~24.04.1 Fix: upgrade to 6.17.0-1018.18~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 |
< 6.17.0-1017.19~24.04.1 Fix: upgrade to 6.17.0-1017.19~24.04.1
|
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-40.40 Fix: upgrade to 6.17.0-40.40
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1019.19 Fix: upgrade to 6.17.0-1019.19
|
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1020.22 Fix: upgrade to 6.17.0-1020.22
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1018.18 Fix: upgrade to 6.17.0-1018.18
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1021.21 Fix: upgrade to 6.17.0-1021.21
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1017.19 Fix: upgrade to 6.17.0-1017.19
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-40.40.1 Fix: upgrade to 6.17.0-40.40.1
|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.74-2.root.io.110 < 6.12.94-1.root.io.141 Fix: upgrade to 6.12.74-2.root.io.110
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Linux | linux | kernel |
>= 6.13.0, < 6.19.10 Fix: upgrade to 6.19.10
|
Original advisory text
CVE-2026-23427 in linux - Patched by Root
Root has patched CVE-2026-23427 in the linux package for Root:Debian:13. Multiple fixed versions available.
References
- https://security-tracker.debian.org/tracker/CVE-2026-23427 Vendor Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-23427 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-23427 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-23427 Third Party Advisory
- https://git.kernel.org/linus/b425e4d0eb321a1116ddbf39636333181675d8f4 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8490-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8491-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8508-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8490-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8545-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8546-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8604-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8605-1 Vendor Advisory
- https://git.kernel.org/stable/c/568a25fd7bcdfb2790f7d42aa2a440dca4435c96 URL
- https://git.kernel.org/stable/c/9b0792c3eacf01e67f356d6ef9707b0ae5022419 URL
- https://git.kernel.org/stable/c/a5828c14a9e3d5eeed0bcc0a58f0f3fbca0cdcb2 URL
- https://git.kernel.org/stable/c/b0158d9d6f4ec5941e49a0b812735db2844f9975 URL
- https://git.kernel.org/stable/c/b425e4d0eb321a1116ddbf39636333181675d8f4 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23427... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-23427 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
9.4
Critical
Type
CWE-416Use After Free
Timeline
Published17 Oct 2026
Updated22 Oct 2026
First seen3 Apr 2026
Sources
DEBIAN-CVE-2026-23427 · OSV
BELL-CVE-2026-23427 · OSV
CVE-2026-23427 · NVD
CVE-2026-23427 · MITRE
UBUNTU-CVE-2026-23427 · OSV
CVE-2026-23427 · OSV
Track software like this
Free during beta