5.5

CVE-2026-23063: linux NULL Pointer Dereference

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-23063DEBIAN-CVE-2026-23063
Published 04-02-2026Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2026-23063 is a medium (CVSS 5.5) NULL Pointer Dereference vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.3% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.14%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 44 · Related 38
DLA-4475-1DLA-4476-1DSA-6126-1DSA-6127-1MGASA-2026-0097MGASA-2026-0098

Timeline

  1. 04-02-2026
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state management Directly calling `put_queue` carries risks since it cannot guarantee that resources of `uacce_queue` have been fully released beforehand. So adding a `stop_queue` operation for the UACCE_CMD_PUT_Q command and leaving the `put_queue` operation to the final resource release ensures safety. Queue states are defined as follows: - UACCE_Q_ZOMBIE: Initial state - UACCE_Q_INIT: After opening `uacce` - UACCE_Q_STARTED: After `start` is issued via `ioctl` When executing `poweroff -f` in virt while accelerator are still working, `uacce_fops_release` and `uacce_remove` may execute concurrently. This can cause `uacce_put_queue` within `uacce_fops_release` to access a NULL `ops` pointer. Therefore, add state checks to prevent accessing freed pointers.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

+0.02 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu144 products
  • linux< 5.15.0-176.186 | < 6.8.0-117.117 | All versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1105.112 | < 6.8.0-1055.58 | All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 015d239ac0142ad0e26567fd890ef8d171f13709, < b457abeb5d962db88aaf60e249402fd3073dbfab | ≥ 015d239ac0142ad0e26567fd890ef8d171f13709, < 8b57bf1d3b1db692f34bce694a03e41be79f6016 | ≥ 015d239ac0142ad0e26567fd890ef8d171f13709, < 336fb41a186e7c0415ae94fec9e23d1f04b87483 | ≥ 015d239ac0142ad0e26567fd890ef8d171f13709, < 43f233eb6e7b9d88536881a9bc43726d0e34800d | ≥ 015d239ac0142ad0e26567fd890ef8d171f13709, < 47634d70073890c9c37e39ab4ff93d4b585b028a | ≥ 015d239ac0142ad0e26567fd890ef8d171f13709, < 92e4f11e29b98ef424ff72d6371acac03e5d973c | ≥ 015d239ac0142ad0e26567fd890ef8d171f13709, < 26c08dabe5475d99a13f353d8dd70e518de45663 | 5.7
  • linux_kernel≥ 5.7, < 5.10.249 | ≥ 5.11, < 5.15.199 | ≥ 5.16, < 6.1.162 | ≥ 6.2, < 6.6.122 | ≥ 6.7, < 6.12.68 | ≥ 6.13, < 6.18.8 | 6.19:rc1 | 6.19:rc2 | 6.19:rc3 | 6.19:rc4 | 6.19:rc5 | 6.19:rc6
Debian1 product
  • linux< 6.1.162-1 | < 6.12.69-1 | < 6.18.8-1

3 vendors · 147 products

References

39 links
Show all 39 references