CVE-2026-23289

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-03-25 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Fix a user triggerable leak on the system call failure path.

Affected Software (11)

VendorProductVersion
Linux Linux ec34a922d243c3401a694450734e9effb2bafbfe < 11ac61f4e9b7c48b0dd44661765e5ace3c441aa3
Linux Linux ec34a922d243c3401a694450734e9effb2bafbfe < 72fcfd4df46f2ee684c4776664d0cfc6c1746c9a
Linux Linux ec34a922d243c3401a694450734e9effb2bafbfe < f67f1ad4029e9fa183141546de31987b254c9292
Linux Linux ec34a922d243c3401a694450734e9effb2bafbfe < d0148965dbca8cc8efa7e3d6e99940487bf661c0
Linux Linux ec34a922d243c3401a694450734e9effb2bafbfe < da8eaa73bc37d004350ba68eb18b6ade8e49db52
Linux Linux ec34a922d243c3401a694450734e9effb2bafbfe < deee46b37ebd8cc5ff810127883fca90f2412a7b
Linux Linux ec34a922d243c3401a694450734e9effb2bafbfe < 972b72d7e2d8fe1400f1c7a8304c282c539b7e02
Linux Linux ec34a922d243c3401a694450734e9effb2bafbfe < 117942ca43e2e3c3d121faae530989931b7f67e1
Linux Linux 2.6.14
linux linux_kernel 2.6.14 – 5.10.253
linux linux_kernel 7.0

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001300
Percentile 2.7%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00130
2026-11-13
0.00130
2026-11-12
0.00130
2026-11-10
0.00127
2026-11-09
0.00127
2026-11-08
0.00127
2026-11-07
0.00127
2026-11-06
0.00127
2026-11-05
0.00127

Intelligence Sources

mitre ref →
nvd ref →