[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-23327":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-30T21:17:53.703Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":25,"downstream":26,"duplicates":53,"related":54,"reserved_at":9,"published_at":68,"modified_at":69,"state":70,"summary":71,"references_raw":80,"kevs":95,"epss":96,"epss_history":99,"metrics":371,"affected":377},"CVE-2026-23327","In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()\n\ncxl_payload_from_user_allowed() casts and dereferences the input\npayload without first verifying its size. When a raw mailbox command\nis sent with an undersized payload (ie: 1 byte for CXL_MBOX_OP_CLEAR_LOG,\nwhich expects a 16-byte UUID), uuid_equal() reads past the allocated buffer,\ntriggering a KASAN splat:\n\nBUG: KASAN: slab-out-of-bounds in memcmp+0x176/0x1d0 lib/string.c:683\nRead of size 8 at addr ffff88810130f5c0 by task syz.1.62/2258\n\nCPU: 2 UID: 0 PID: 2258 Comm: syz.1.62 Not tainted 6.19.0-dirty #3 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014\nCall Trace:\n \u003CTASK>\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xab/0xe0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xce/0x650 mm/kasan/report.c:482\n kasan_report+0xce/0x100 mm/kasan/report.c:595\n memcmp+0x176/0x1d0 lib/string.c:683\n uuid_equal include/linux/uuid.h:73 [inline]\n cxl_payload_from_user_allowed drivers/cxl/core/mbox.c:345 [inline]\n cxl_mbox_cmd_ctor drivers/cxl/core/mbox.c:368 [inline]\n cxl_validate_cmd_from_user drivers/cxl/core/mbox.c:522 [inline]\n cxl_send_cmd+0x9c0/0xb50 drivers/cxl/core/mbox.c:643\n __cxl_memdev_ioctl drivers/cxl/core/memdev.c:698 [inline]\n cxl_memdev_ioctl+0x14f/0x190 drivers/cxl/core/memdev.c:713\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:597 [inline]\n __se_sys_ioctl fs/ioctl.c:583 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xa8/0x330 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fdaf331ba79\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003C48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fdaf1d77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007fdaf3585fa0 RCX: 00007fdaf331ba79\nRDX: 00002000000001c0 RSI: 00000000c030ce02 RDI: 0000000000000003\nRBP: 00007fdaf33749df R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 00007fdaf3586038 R14: 00007fdaf3585fa0 R15: 00007ffced2af768\n \u003C/TASK>\n\nAdd 'in_size' parameter to cxl_payload_from_user_allowed() and validate\nthe payload is large enough.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[],[],[27,29,31,33,35,37,39,41,43,45,47,49,51],{"_key":28},"DEBIAN-CVE-2026-23327",{"_key":30},"SUSE-SU-2026:22108-1",{"_key":32},"SUSE-SU-2026:22127-1",{"_key":34},"SUSE-SU-2026:22112-1",{"_key":36},"SUSE-SU-2026:22099-1",{"_key":38},"SUSE-SU-2026:22137-1",{"_key":40},"SUSE-SU-2026:2482-1",{"_key":42},"SUSE-SU-2026:2591-1",{"_key":44},"OPENSUSE-SU-2026:20965-1",{"_key":46},"SUSE-SU-2026:22117-1",{"_key":48},"SUSE-SU-2026:22433-1",{"_key":50},"SUSE-SU-2026:22458-1",{"_key":52},"UBUNTU-CVE-2026-23327",[],[55,56,57,58,59,60,61,62,63,64,65,66],{"_key":30},{"_key":32},{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":48},{"_key":50},{"_key":67},"CGA-P2Q9-HVJV-674G","2026-03-25T10:27:19.815Z","2026-06-01T16:10:59.933Z","Modified",{"cisa_kev":72,"cisa_ransomware":72,"cisa_vendor":9,"epss_severity":73,"epss_score":74,"severity":75,"severity_score":76,"severity_version":77,"severity_source":78,"severity_vector":79,"severity_status":70},false,"low",0.00124,"high",7.1,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",[81,87,91],{"url":82,"sources":83,"tags":85},"https://git.kernel.org/stable/c/7c8a7b7f063b7e7ae9bba4cbaa14a5d2fe3a55e1",[84,78],"cve.org",[86],"Patch",{"url":88,"sources":89,"tags":90},"https://git.kernel.org/stable/c/60b5d1f68338aff2c5af0113f04aefa7169c50c2",[84,78],[86],{"url":92,"sources":93,"tags":94},"https://git.kernel.org/stable/c/dc184ac2f0ba77ae19725ee06ad3ab36bb9d1f61",[84,78],[],[],{"date":97,"score":74,"percentile":98},"2026-07-05",0.02478,[100,104,107,110,113,116,119,123,126,129,132,135,138,141,144,147,150,153,156,159,162,165,168,171,174,177,180,183,186,189,192,196,199,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,271,273,276,279,282,285,288,291,294,297,299,302,305,309,312,315,318,321,324,327,330,333,336,339,342,344,347,350,353,356,359,362,365,368],{"date":101,"score":102,"percentile":103},"2026-03-25",0.00018,0.04719,{"date":105,"score":102,"percentile":106},"2026-03-26",0.0475,{"date":108,"score":102,"percentile":109},"2026-03-27",0.04751,{"date":111,"score":102,"percentile":112},"2026-03-28",0.04753,{"date":114,"score":102,"percentile":115},"2026-03-29",0.04749,{"date":117,"score":102,"percentile":118},"2026-03-30",0.0473,{"date":120,"score":121,"percentile":122},"2026-03-31",0.00024,0.06447,{"date":124,"score":121,"percentile":125},"2026-04-01",0.06459,{"date":127,"score":121,"percentile":128},"2026-04-02",0.06492,{"date":130,"score":121,"percentile":131},"2026-04-03",0.06504,{"date":133,"score":121,"percentile":134},"2026-04-04",0.0653,{"date":136,"score":121,"percentile":137},"2026-04-05",0.06529,{"date":139,"score":121,"percentile":140},"2026-04-06",0.06502,{"date":142,"score":121,"percentile":143},"2026-04-07",0.0652,{"date":145,"score":121,"percentile":146},"2026-04-08",0.0657,{"date":148,"score":121,"percentile":149},"2026-04-09",0.06614,{"date":151,"score":121,"percentile":152},"2026-04-10",0.06618,{"date":154,"score":121,"percentile":155},"2026-04-11",0.06607,{"date":157,"score":121,"percentile":158},"2026-04-12",0.06599,{"date":160,"score":121,"percentile":161},"2026-04-13",0.0659,{"date":163,"score":121,"percentile":164},"2026-04-14",0.065,{"date":166,"score":121,"percentile":167},"2026-04-15",0.06505,{"date":169,"score":121,"percentile":170},"2026-04-16",0.06516,{"date":172,"score":121,"percentile":173},"2026-04-17",0.06526,{"date":175,"score":121,"percentile":176},"2026-04-18",0.06523,{"date":178,"score":121,"percentile":179},"2026-04-19",0.06503,{"date":181,"score":121,"percentile":182},"2026-04-20",0.06485,{"date":184,"score":121,"percentile":185},"2026-04-21",0.06675,{"date":187,"score":121,"percentile":188},"2026-04-22",0.06682,{"date":190,"score":121,"percentile":191},"2026-04-23",0.06702,{"date":193,"score":194,"percentile":195},"2026-04-24",0.00015,0.02863,{"date":197,"score":194,"percentile":198},"2026-04-25",0.02877,{"date":200,"score":201,"percentile":202},"2026-04-26",0.00017,0.04026,{"date":204,"score":201,"percentile":205},"2026-04-27",0.04016,{"date":207,"score":201,"percentile":208},"2026-04-28",0.04053,{"date":210,"score":201,"percentile":211},"2026-04-29",0.04071,{"date":213,"score":201,"percentile":214},"2026-04-30",0.04067,{"date":216,"score":201,"percentile":217},"2026-05-01",0.04066,{"date":219,"score":201,"percentile":220},"2026-05-02",0.04051,{"date":222,"score":201,"percentile":223},"2026-05-03",0.04038,{"date":225,"score":201,"percentile":226},"2026-05-04",0.04035,{"date":228,"score":201,"percentile":229},"2026-05-05",0.04031,{"date":231,"score":201,"percentile":232},"2026-05-06",0.04022,{"date":234,"score":201,"percentile":235},"2026-05-07",0.04045,{"date":237,"score":201,"percentile":238},"2026-05-08",0.04052,{"date":240,"score":201,"percentile":241},"2026-05-09",0.04078,{"date":243,"score":201,"percentile":244},"2026-05-10",0.04091,{"date":246,"score":201,"percentile":247},"2026-05-11",0.04084,{"date":249,"score":201,"percentile":250},"2026-05-12",0.04092,{"date":252,"score":201,"percentile":253},"2026-05-13",0.0411,{"date":255,"score":201,"percentile":256},"2026-05-14",0.04123,{"date":258,"score":201,"percentile":259},"2026-05-15",0.04135,{"date":261,"score":201,"percentile":262},"2026-05-16",0.04145,{"date":264,"score":201,"percentile":265},"2026-05-17",0.04143,{"date":267,"score":201,"percentile":268},"2026-05-18",0.0412,{"date":270,"score":201,"percentile":253},"2026-05-19",{"date":272,"score":201,"percentile":253},"2026-05-20",{"date":274,"score":201,"percentile":275},"2026-05-21",0.04115,{"date":277,"score":201,"percentile":278},"2026-05-22",0.04304,{"date":280,"score":201,"percentile":281},"2026-05-23",0.04295,{"date":283,"score":201,"percentile":284},"2026-05-24",0.04293,{"date":286,"score":201,"percentile":287},"2026-05-25",0.04269,{"date":289,"score":201,"percentile":290},"2026-05-26",0.04265,{"date":292,"score":201,"percentile":293},"2026-05-27",0.04292,{"date":295,"score":201,"percentile":296},"2026-05-28",0.04278,{"date":298,"score":201,"percentile":293},"2026-05-29",{"date":300,"score":201,"percentile":301},"2026-05-30",0.04318,{"date":303,"score":201,"percentile":304},"2026-05-31",0.04296,{"date":306,"score":307,"percentile":308},"2026-06-01",0.00019,0.05602,{"date":310,"score":201,"percentile":311},"2026-06-02",0.04649,{"date":313,"score":201,"percentile":314},"2026-06-03",0.04626,{"date":316,"score":201,"percentile":317},"2026-06-04",0.04623,{"date":319,"score":201,"percentile":320},"2026-06-05",0.04647,{"date":322,"score":201,"percentile":323},"2026-06-06",0.04633,{"date":325,"score":201,"percentile":326},"2026-06-07",0.0462,{"date":328,"score":201,"percentile":329},"2026-06-08",0.04584,{"date":331,"score":201,"percentile":332},"2026-06-09",0.04603,{"date":334,"score":201,"percentile":335},"2026-06-10",0.04621,{"date":337,"score":201,"percentile":338},"2026-06-11",0.04636,{"date":340,"score":201,"percentile":341},"2026-06-12",0.04635,{"date":343,"score":201,"percentile":326},"2026-06-13",{"date":345,"score":201,"percentile":346},"2026-06-14",0.04613,{"date":348,"score":74,"percentile":349},"2026-06-15",0.02445,{"date":351,"score":74,"percentile":352},"2026-06-16",0.0245,{"date":354,"score":74,"percentile":355},"2026-06-17",0.02458,{"date":357,"score":74,"percentile":358},"2026-06-18",0.02457,{"date":360,"score":74,"percentile":361},"2026-06-19",0.02454,{"date":363,"score":74,"percentile":364},"2026-06-20",0.02452,{"date":366,"score":74,"percentile":367},"2026-06-21",0.02447,{"date":369,"score":74,"percentile":370},"2026-06-22",0.02444,[372],{"source":78,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":373,"cvss_v4_0":9},{"baseScore":76,"baseSeverity":374,"vectorString":79,"impactScore":375,"exploitabilityScore":376},"HIGH",8.7,4.6,[378,398],{"ecosystem":9,"name":379,"vendor":380,"product":380,"cpe_part":381,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":382},"Linux","linux","a",[383,390,393,396],{"version":384,"is_range":385,"range_type":84,"version_start":386,"version_start_type":387,"version_end":388,"version_end_type":389,"fixed_in":9},">= 6179045ccc0c6229dc449afc1701dc7fbd40571f, \u003C dc184ac2f0ba77ae19725ee06ad3ab36bb9d1f61",true,"6179045ccc0c6229dc449afc1701dc7fbd40571f","including","dc184ac2f0ba77ae19725ee06ad3ab36bb9d1f61","excluding",{"version":391,"is_range":385,"range_type":84,"version_start":386,"version_start_type":387,"version_end":392,"version_end_type":389,"fixed_in":9},">= 6179045ccc0c6229dc449afc1701dc7fbd40571f, \u003C 7c8a7b7f063b7e7ae9bba4cbaa14a5d2fe3a55e1","7c8a7b7f063b7e7ae9bba4cbaa14a5d2fe3a55e1",{"version":394,"is_range":385,"range_type":84,"version_start":386,"version_start_type":387,"version_end":395,"version_end_type":389,"fixed_in":9},">= 6179045ccc0c6229dc449afc1701dc7fbd40571f, \u003C 60b5d1f68338aff2c5af0113f04aefa7169c50c2","60b5d1f68338aff2c5af0113f04aefa7169c50c2",{"version":397,"is_range":72,"range_type":84,"version_start":397,"version_start_type":387,"version_end":397,"version_end_type":387,"fixed_in":9},"5.19",{"ecosystem":9,"name":399,"vendor":380,"product":400,"cpe_part":381,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":401},"Linux Kernel","linux kernel",[402,407,408,410,412,414,416,418,420],{"version":403,"is_range":385,"range_type":404,"version_start":405,"version_start_type":387,"version_end":406,"version_end_type":389,"fixed_in":9},"gte5.19.1_lt6.19.7","cpe","5.19.1","6.19.7",{"version":397,"is_range":72,"range_type":404,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":409,"is_range":72,"range_type":404,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc1",{"version":411,"is_range":72,"range_type":404,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc2",{"version":413,"is_range":72,"range_type":404,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc3",{"version":415,"is_range":72,"range_type":404,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc4",{"version":417,"is_range":72,"range_type":404,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc5",{"version":419,"is_range":72,"range_type":404,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc6",{"version":421,"is_range":72,"range_type":404,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0:rc7"]