GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-23064 (GCVE-0-2026-23064)

Vulnerability from cvelistv5 – Published: 2026-02-04 16:07 – Updated: 2026-05-11 21:59
VLAI
Title
net/sched: act_ife: avoid possible NULL deref
Summary
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: avoid possible NULL deref tcf_ife_encode() must make sure ife_encode() does not return NULL. syzbot reported: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:ife_tlv_meta_encode+0x41/0xa0 net/ife/ife.c:166 CPU: 3 UID: 0 PID: 8990 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full) Call Trace: <TASK> ife_encode_meta_u32+0x153/0x180 net/sched/act_ife.c:101 tcf_ife_encode net/sched/act_ife.c:841 [inline] tcf_ife_act+0x1022/0x1de0 net/sched/act_ife.c:877 tc_act include/net/tc_wrapper.h:130 [inline] tcf_action_exec+0x1c0/0xa20 net/sched/act_api.c:1152 tcf_exts_exec include/net/pkt_cls.h:349 [inline] mall_classify+0x1a0/0x2a0 net/sched/cls_matchall.c:42 tc_classify include/net/tc_wrapper.h:197 [inline] __tcf_classify net/sched/cls_api.c:1764 [inline] tcf_classify+0x7f2/0x1380 net/sched/cls_api.c:1860 multiq_classify net/sched/sch_multiq.c:39 [inline] multiq_enqueue+0xe0/0x510 net/sched/sch_multiq.c:66 dev_qdisc_enqueue+0x45/0x250 net/core/dev.c:4147 __dev_xmit_skb net/core/dev.c:4262 [inline] __dev_queue_xmit+0x2998/0x46c0 net/core/dev.c:4798
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 295a6e06d21e1f469c9f38b00125a13b60ad4e7c , < 4ef2c77851676b7ed106f0c47755bee9eeec9a40 (git)
Affected: 295a6e06d21e1f469c9f38b00125a13b60ad4e7c , < dd9442aedbeae87c44cc64c0ee41abd296dc008b (git)
Affected: 295a6e06d21e1f469c9f38b00125a13b60ad4e7c , < 1440d749fe49c8665da6f744323b1671d25a56a0 (git)
Affected: 295a6e06d21e1f469c9f38b00125a13b60ad4e7c , < 03710cebfc0bcfe247a9e04381e79ea33896e278 (git)
Affected: 295a6e06d21e1f469c9f38b00125a13b60ad4e7c , < 374915dfc932adf57712df3be010667fd1190e3c (git)
Affected: 295a6e06d21e1f469c9f38b00125a13b60ad4e7c , < 6c75fed55080014545f262b7055081cec4768b20 (git)
Affected: 295a6e06d21e1f469c9f38b00125a13b60ad4e7c , < 27880b0b0d35ad1c98863d09788254e36f874968 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.11
Unaffected: 0 , < 4.11 (semver)
Unaffected: 5.10.249 , ≤ 5.10.* (semver)
Unaffected: 5.15.199 , ≤ 5.15.* (semver)
Unaffected: 6.1.162 , ≤ 6.1.* (semver)
Unaffected: 6.6.122 , ≤ 6.6.* (semver)
Unaffected: 6.12.68 , ≤ 6.12.* (semver)
Unaffected: 6.18.8 , ≤ 6.18.* (semver)
Unaffected: 6.19 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/sched/act_ife.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "4ef2c77851676b7ed106f0c47755bee9eeec9a40",
              "status": "affected",
              "version": "295a6e06d21e1f469c9f38b00125a13b60ad4e7c",
              "versionType": "git"
            },
            {
              "lessThan": "dd9442aedbeae87c44cc64c0ee41abd296dc008b",
              "status": "affected",
              "version": "295a6e06d21e1f469c9f38b00125a13b60ad4e7c",
              "versionType": "git"
            },
            {
              "lessThan": "1440d749fe49c8665da6f744323b1671d25a56a0",
              "status": "affected",
              "version": "295a6e06d21e1f469c9f38b00125a13b60ad4e7c",
              "versionType": "git"
            },
            {
              "lessThan": "03710cebfc0bcfe247a9e04381e79ea33896e278",
              "status": "affected",
              "version": "295a6e06d21e1f469c9f38b00125a13b60ad4e7c",
              "versionType": "git"
            },
            {
              "lessThan": "374915dfc932adf57712df3be010667fd1190e3c",
              "status": "affected",
              "version": "295a6e06d21e1f469c9f38b00125a13b60ad4e7c",
              "versionType": "git"
            },
            {
              "lessThan": "6c75fed55080014545f262b7055081cec4768b20",
              "status": "affected",
              "version": "295a6e06d21e1f469c9f38b00125a13b60ad4e7c",
              "versionType": "git"
            },
            {
              "lessThan": "27880b0b0d35ad1c98863d09788254e36f874968",
              "status": "affected",
              "version": "295a6e06d21e1f469c9f38b00125a13b60ad4e7c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/sched/act_ife.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.11"
            },
            {
              "lessThan": "4.11",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.249",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.199",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.162",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.122",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.68",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.249",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.199",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.162",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.122",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.68",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.8",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19",
                  "versionStartIncluding": "4.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: act_ife: avoid possible NULL deref\n\ntcf_ife_encode() must make sure ife_encode() does not return NULL.\n\nsyzbot reported:\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\n RIP: 0010:ife_tlv_meta_encode+0x41/0xa0 net/ife/ife.c:166\nCPU: 3 UID: 0 PID: 8990 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full)\nCall Trace:\n \u003cTASK\u003e\n  ife_encode_meta_u32+0x153/0x180 net/sched/act_ife.c:101\n  tcf_ife_encode net/sched/act_ife.c:841 [inline]\n  tcf_ife_act+0x1022/0x1de0 net/sched/act_ife.c:877\n  tc_act include/net/tc_wrapper.h:130 [inline]\n  tcf_action_exec+0x1c0/0xa20 net/sched/act_api.c:1152\n  tcf_exts_exec include/net/pkt_cls.h:349 [inline]\n  mall_classify+0x1a0/0x2a0 net/sched/cls_matchall.c:42\n  tc_classify include/net/tc_wrapper.h:197 [inline]\n  __tcf_classify net/sched/cls_api.c:1764 [inline]\n  tcf_classify+0x7f2/0x1380 net/sched/cls_api.c:1860\n  multiq_classify net/sched/sch_multiq.c:39 [inline]\n  multiq_enqueue+0xe0/0x510 net/sched/sch_multiq.c:66\n  dev_qdisc_enqueue+0x45/0x250 net/core/dev.c:4147\n  __dev_xmit_skb net/core/dev.c:4262 [inline]\n  __dev_queue_xmit+0x2998/0x46c0 net/core/dev.c:4798"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:59:18.219Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/4ef2c77851676b7ed106f0c47755bee9eeec9a40"
        },
        {
          "url": "https://git.kernel.org/stable/c/dd9442aedbeae87c44cc64c0ee41abd296dc008b"
        },
        {
          "url": "https://git.kernel.org/stable/c/1440d749fe49c8665da6f744323b1671d25a56a0"
        },
        {
          "url": "https://git.kernel.org/stable/c/03710cebfc0bcfe247a9e04381e79ea33896e278"
        },
        {
          "url": "https://git.kernel.org/stable/c/374915dfc932adf57712df3be010667fd1190e3c"
        },
        {
          "url": "https://git.kernel.org/stable/c/6c75fed55080014545f262b7055081cec4768b20"
        },
        {
          "url": "https://git.kernel.org/stable/c/27880b0b0d35ad1c98863d09788254e36f874968"
        }
      ],
      "title": "net/sched: act_ife: avoid possible NULL deref",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-23064",
    "datePublished": "2026-02-04T16:07:46.329Z",
    "dateReserved": "2026-01-13T15:37:45.953Z",
    "dateUpdated": "2026-05-11T21:59:18.219Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-23064",
      "date": "2026-09-15",
      "epss": "0.00128",
      "percentile": "0.02754"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-23064\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-02-04T17:16:17.093\",\"lastModified\":\"2026-06-17T10:20:47.913\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet/sched: act_ife: avoid possible NULL deref\\n\\ntcf_ife_encode() must make sure ife_encode() does not return NULL.\\n\\nsyzbot reported:\\n\\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI\\nKASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]\\n RIP: 0010:ife_tlv_meta_encode+0x41/0xa0 net/ife/ife.c:166\\nCPU: 3 UID: 0 PID: 8990 Comm: syz.0.696 Not tainted syzkaller #0 PREEMPT(full)\\nCall Trace:\\n \u003cTASK\u003e\\n  ife_encode_meta_u32+0x153/0x180 net/sched/act_ife.c:101\\n  tcf_ife_encode net/sched/act_ife.c:841 [inline]\\n  tcf_ife_act+0x1022/0x1de0 net/sched/act_ife.c:877\\n  tc_act include/net/tc_wrapper.h:130 [inline]\\n  tcf_action_exec+0x1c0/0xa20 net/sched/act_api.c:1152\\n  tcf_exts_exec include/net/pkt_cls.h:349 [inline]\\n  mall_classify+0x1a0/0x2a0 net/sched/cls_matchall.c:42\\n  tc_classify include/net/tc_wrapper.h:197 [inline]\\n  __tcf_classify net/sched/cls_api.c:1764 [inline]\\n  tcf_classify+0x7f2/0x1380 net/sched/cls_api.c:1860\\n  multiq_classify net/sched/sch_multiq.c:39 [inline]\\n  multiq_enqueue+0xe0/0x510 net/sched/sch_multiq.c:66\\n  dev_qdisc_enqueue+0x45/0x250 net/core/dev.c:4147\\n  __dev_xmit_skb net/core/dev.c:4262 [inline]\\n  __dev_queue_xmit+0x2998/0x46c0 net/core/dev.c:4798\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\nnet/sched: act_ife: evitar posible desreferencia de NULL\\n\\ntcf_ife_encode() debe asegurarse de que ife_encode() no devuelva NULL.\\n\\nsyzbot inform\u00f3:\\n\\nOops: fallo de protecci\u00f3n general, probablemente para direcci\u00f3n no can\u00f3nica 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI\\nKASAN: desreferencia de puntero nulo en el rango [0x0000000000000000-0x0000000000000007]\\n RIP: 0010:ife_tlv_meta_encode+0x41/0xa0 net/ife/ife.c:166\\nCPU: 3 UID: 0 PID: 8990 Comm: syz.0.696 No contaminado syzkaller #0 PREEMPT(full)\\nTraza de Llamada:\\n \\n  ife_encode_meta_u32+0x153/0x180 net/sched/act_ife.c:101\\n  tcf_ife_encode net/sched/act_ife.c:841 [inline]\\n  tcf_ife_act+0x1022/0x1de0 net/sched/act_ife.c:877\\n  tc_act include/net/tc_wrapper.h:130 [inline]\\n  tcf_action_exec+0x1c0/0xa20 net/sched/act_api.c:1152\\n  tcf_exts_exec include/net/pkt_cls.h:349 [inline]\\n  mall_classify+0x1a0/0x2a0 net/sched/cls_matchall.c:42\\n  tc_classify include/net/tc_wrapper.h:197 [inline]\\n  __tcf_classify net/sched/cls_api.c:1764 [inline]\\n  tcf_classify+0x7f2/0x1380 net/sched/cls_api.c:1860\\n  multiq_classify net/sched/sch_multiq.c:39 [inline]\\n  multiq_enqueue+0xe0/0x510 net/sched/sch_multiq.c:66\\n  dev_qdisc_enqueue+0x45/0x250 net/core/dev.c:4147\\n  __dev_xmit_skb net/core/dev.c:4262 [inline]\\n  __dev_queue_xmit+0x2998/0x46c0 net/core/dev.c:4798\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/sched/act_ife.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"295a6e06d21e1f469c9f38b00125a13b60ad4e7c\",\"lessThan\":\"4ef2c77851676b7ed106f0c47755bee9eeec9a40\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"295a6e06d21e1f469c9f38b00125a13b60ad4e7c\",\"lessThan\":\"dd9442aedbeae87c44cc64c0ee41abd296dc008b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"295a6e06d21e1f469c9f38b00125a13b60ad4e7c\",\"lessThan\":\"1440d749fe49c8665da6f744323b1671d25a56a0\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"295a6e06d21e1f469c9f38b00125a13b60ad4e7c\",\"lessThan\":\"03710cebfc0bcfe247a9e04381e79ea33896e278\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"295a6e06d21e1f469c9f38b00125a13b60ad4e7c\",\"lessThan\":\"374915dfc932adf57712df3be010667fd1190e3c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"295a6e06d21e1f469c9f38b00125a13b60ad4e7c\",\"lessThan\":\"6c75fed55080014545f262b7055081cec4768b20\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"295a6e06d21e1f469c9f38b00125a13b60ad4e7c\",\"lessThan\":\"27880b0b0d35ad1c98863d09788254e36f874968\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/sched/act_ife.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.11\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.11\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.249\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.199\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.162\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.122\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.68\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.8\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.11\",\"versionEndExcluding\":\"5.10.249\",\"matchCriteriaId\":\"38F17895-900B-4922-A93D-6EAA1D14927A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.199\",\"matchCriteriaId\":\"A247FBA6-BEB9-484F-B892-DD5517949CCD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.162\",\"matchCriteriaId\":\"6579E0D4-0641-479D-A4C3-0EF618798C55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.6.122\",\"matchCriteriaId\":\"8EAAE395-0162-4BAF-9AD5-E9AF3C869C4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.68\",\"matchCriteriaId\":\"52F38E19-0FDD-4992-9D6D-D4169D689598\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.8\",\"matchCriteriaId\":\"E65C6E79-7EBE-4C77-93F0-818CF5B38F4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"17B67AA7-40D6-4AFA-8459-F200F3D7CFD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C47E4CC9-C826-4FA9-B014-7FE3D9B318B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F71D92C0-C023-48BD-B3B6-70B638EEE298\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"13580667-0A98-40CC-B29F-D12790B91BDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"CAD1FED7-CF48-47BF-AC7D-7B6FA3C065FC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.19:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"3EF854A1-ABB1-4E93-BE9A-44569EC76C0D\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/03710cebfc0bcfe247a9e04381e79ea33896e278\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/1440d749fe49c8665da6f744323b1671d25a56a0\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/27880b0b0d35ad1c98863d09788254e36f874968\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/374915dfc932adf57712df3be010667fd1190e3c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/4ef2c77851676b7ed106f0c47755bee9eeec9a40\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6c75fed55080014545f262b7055081cec4768b20\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dd9442aedbeae87c44cc64c0ee41abd296dc008b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-28T07:18:30+00:00",
      "cve": "CVE-2026-23064",
      "id": "CVE-2026-23064",
      "initial_release_date": "2026-02-04T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net/sched: act_ife: avoid possible NULL deref",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23064.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-24T02:40:34Z",
      "cve": "CVE-2026-23064",
      "id": "CVE-2026-23064",
      "initial_release_date": "2026-02-05T00:25:24Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "604",
      "product_status:known_not_affected": "20",
      "product_status:recommended": "318",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-23064",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-23064.json",
      "version": "31"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.