5.5

CVE-2026-23360: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2026-23360DEBIAN-CVE-2026-23360
Published 25-03-2026Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2026-23360 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.12% chance of exploitation in the next 30 days, higher than 1.8% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.12%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 13 · Related 13
SUSE-SU-2026:21834-1USN-8567-1USN-8574-1USN-8574-2USN-8574-3USN-8595-1

Timeline

  1. 25-03-2026
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset When nvme_alloc_admin_tag_set() is called during a controller reset, a previous admin queue may still exist. Release it properly before allocating a new one to avoid orphaning the old queue. This fixes a regression introduced by commit 03b3bcd319b3 ("nvme: fix admin request_queue lifetime").

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.12%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

0.00 pp

From 0.12% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.12%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu124 products
  • linux< 6.8.0-136.136 | All versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 6.8.0-1061.64 | All versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ ff037b5f47eeccc1636c03f84cd47db094eb73c9, < 089a6f17881a82c6c6e05f8564a867be0767eade | ≥ 4896491c497226022626c3acc46044fd182f943c, < 6e28bab900e40e4d610b04f9f82e01983d8fb356 | ≥ a505f0ba36ab24176c300d7ff56aff85c2977e6c, < 2efbc838a26d3da72d8fe05770bdf869d4ca3ac5 | ≥ e8061d02b49c5c901980f58d91e96580e9a14acf, < 64f87b96de0e645a4c066c7cffd753f334446db6 | ≥ 03b3bcd319b3ab5182bc9aaa0421351572c78ac0, < e159eb852aeee95443a9458ecb7d072bbb689913 | ≥ 03b3bcd319b3ab5182bc9aaa0421351572c78ac0, < 8eb2b3cdcd9b6631b94b82c1f4f6bc32b40d942f | ≥ 03b3bcd319b3ab5182bc9aaa0421351572c78ac0, < b84bb7bd913d8ca2f976ee6faf4a174f91c02b8d | e7dac681790556c131854b97551337aa8042215b | ≥ 6.1.167, < 6.1.168 | ≥ 6.6.120, < 6.6.131 | ≥ 6.12.62, < 6.12.77 | ≥ 6.17.12, < 6.18 | 6.18
  • linux_kernel≥ 6.6.120, < 6.6.131 | ≥ 6.12.62, < 6.12.77 | ≥ 6.17.12, < 6.18 | ≥ 6.18.1, < 6.18.17 | ≥ 6.19, < 6.19.7 | 6.1.167 | 6.18 | 7.0:rc1 | 7.0:rc2
Debian1 product
  • linux< 6.12.85-1 | < 6.19.8-1

3 vendors · 127 products

References

24 links
Show all 24 references