CVE-2023-26605: linux linux_kernel Use After Free
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2023-26605DEBIAN-CVE-2023-26605
Published 26-02-2023Last modified 05-05-2025
Vulnerability summary
CVE-2023-26605 is a high (CVSS 7.8) Use After Free vulnerability in linux linux_kernel. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29.8% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.37%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference
Advisory lineage
Upstream 0 · Downstream 7 · Related 7Timeline
- 26-02-2023PublishedVulnerability first disclosed.
- 05-05-2025Last modifiedVulnerability information updated.
Description
In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid.
CVSS metrics
4 scores · 4 sources · 1 versionHigh 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSourcesAll 4 agree
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.37%
Chance of exploitation in the next 30 days
Percentile
30%
Versus all other CVEs
30-day change
0.00 pp
From 0.37% on 21-09-2026
21-09-202621-10-2026
EPSS score0.37%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (lkml.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Ubuntu68 products
- linux< 5.15.0-67.74
- linux-aws< 5.15.0-1031.35
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13All versions (No fix recorded)
Debian1 product
- linux< 6.0.12-1
Linux1 product
- linux_kernel≥ 5.15.75, < 5.15.81 | ≥ 5.19.17, < 6.0.0 | ≥ 6.0.3, < 6.0.11
3 vendors · 70 products
References
15 links- security.netapp.com/advisory/ntap-20230316-0010/Third Party Advisory
