CVE-2026-23031: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2026-23031DEBIAN-CVE-2026-23031
Published 31-01-2026Last modified 02-06-2026
Open JSON

Vulnerability summary

CVE-2026-23031 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 12.1% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.22%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 37 · Related 32
DLA-4476-1DSA-6126-1DSA-6127-1MGASA-2026-0097MGASA-2026-0098OPENSUSE-SU-2026:20416-1

Timeline

  1. 31-01-2026
    PublishedVulnerability first disclosed.
  2. 02-06-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak In gs_can_open(), the URBs for USB-in transfers are allocated, added to the parent->rx_submitted anchor and submitted. In the complete callback gs_usb_receive_bulk_callback(), the URB is processed and resubmitted. In gs_can_close() the URBs are freed by calling usb_kill_anchored_urbs(parent->rx_submitted). However, this does not take into account that the USB framework unanchors the URB before the complete function is called. This means that once an in-URB has been completed, it is no longer anchored and is ultimately not released in gs_can_close(). Fix the memory leak by anchoring the URB in the gs_usb_receive_bulk_callback() to the parent->rx_submitted anchor.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

+0.01 pp

From 0.21% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu157 products
  • linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-117.117
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1055.58
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.162-1 | < 6.12.69-1 | < 6.18.8-1
Linux1 product
  • linux≥ d08e973a77d128b25e01a08c34d89593fdf222da, < 9c151898cc259a7784be60ba38664f42ede39b31 | ≥ d08e973a77d128b25e01a08c34d89593fdf222da, < ec5ccc2af9e5b045671f3f604b57512feda8bcc5 | ≥ d08e973a77d128b25e01a08c34d89593fdf222da, < f905bcfa971edb89e398c98957838d8c6381c0c7 | ≥ d08e973a77d128b25e01a08c34d89593fdf222da, < 08624b7206ddb9148eeffc2384ebda2c47b6d1e9 | ≥ d08e973a77d128b25e01a08c34d89593fdf222da, < 9f669a38ca70839229b7ba0f851820850a2fe1f7 | ≥ d08e973a77d128b25e01a08c34d89593fdf222da, < 7352e1d5932a0e777e39fa4b619801191f57e603 | 3.16

3 vendors · 159 products

References

40 links
Show all 40 references