CVE-2026-23319: bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim
bpf: Fix a UAF issue in bpftrampolinelinkcgroupshim
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23319?
CVE-2026-23319 is classified as a high severity vulnerability due to the potential for exploitation leading to unauthorized access or denial of service.
How do I fix CVE-2026-23319?
To remediate CVE-2026-23319, users should apply the latest patches or updates provided for their Linux kernel version.
What are the potential impacts of CVE-2026-23319?
CVE-2026-23319 could lead to a use-after-free scenario, possibly allowing attackers to execute arbitrary code or crash affected systems.
Which versions of the Linux kernel are affected by CVE-2026-23319?
CVE-2026-23319 affects multiple versions of the Linux kernel, particularly those prior to the patches addressing the issue.
Is there a workaround for CVE-2026-23319?
While applying updates is the best practice, temporarily disabling BPF trampoline features may serve as a workaround until a patch can be applied.