CVE-2026-23099

unknowncovered by 7 sourcesfirst seen 2026-07-06

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block device driver; - Bluetooth drivers; - Counter interface drivers; - DMA engine subsystem; - DPLL subsystem; - GPIO subsystem; - GPU drivers; - I2C subsystem; - IIO ADC drivers; - IIO subsystem; - InfiniBand drivers; - On-Chip Interconnect management framework; - IOMMU subsystem; - IRQ chip drivers; - Modular ISDN driver; - LED subsystem; - Multiple devices driver; - Media drivers; - UACCE accelerator framework; - MMC subsystem; - Ethernet bonding driver; - Network drivers; - Mellanox network drivers; - Texas Instruments network drivers; - NVME drivers; - Device tree and open firmware driver; - PHY drivers; - x86 platform drivers; - i.MX PM domains; - SCSI subsystem; - SLIMbus drivers; - SPI subsystem; - TTY drivers; - USB Host Controller drivers; - W1 Dallas's 1-wire bus driver; - Xen hypervisor drivers; - BTRFS file system; - EFI Variable file system; - File systems infrastructure; - Ext4 file system; - FUSE (File system in Userspace); - Network file systems library; - Network file system (NFS) client; - Network file system (NFS) server daemon; - SMB network file system; - Memory Management; - Memory management; - Scheduler infrastructure; - Tracing infrastructure; - IPv4 networking; - Netfilter; - NFC subsystem; - Network traffic control; - TCP network protocol; - io_uring subsystem; - Perf events; - Locking primitives; - Hibernation control; - Timer subsystem; - BPF subsystem; - Floating proportions library; - Bluetooth subsystem; - CAN network layer; - Ceph Core library; - Networking core; - IPv6 networking; - L2TP protocol; - MAC80211 subsystem; - Multipath TCP; - NET/ROM layer; - RxRPC session sockets; - SCTP protocol; - SMC sockets; - VMware vSockets driver; - Wireles

CSIRTS triage

What: Multiple security flaws across numerous kernel subsystems including architecture, drivers, and network protocols.
Who is affected: Systems running affected Linux kernel versions are potentially vulnerable depending on subsystem exposure.
Urgency: Severity and urgency depend on specific CVE; kernel patch should be applied as part of regular maintenance cycle.
Action: Apply kernel security updates provided by distribution maintainer.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-23099

Get an email if CVE-2026-23099 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.15% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 5% of all EPSS-scored CVEs.

Advisory coverage (7)

unknownUSN-8669-1: Linux kernel (NVIDIA) vulnerabilitiesubuntu · 2026-08-21
unknownUSN-8570-2: Linux kernel (Oracle) vulnerabilitiesubuntu · 2026-07-28
unknownUSN-8605-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu · 2026-07-24
unknownUSN-8604-1: Linux kernel (Azure) vulnerabilitiesubuntu · 2026-07-24
unknownUSN-8594-1: Linux kernel (OEM) vulnerabilitiesubuntu · 2026-07-23
unknownUSN-8570-1: Linux kernel vulnerabilitiesubuntu · 2026-07-20
unknownDebian Linux Kernel Multiple Vulnerabilitieshkcert · 2026-07-06

External references

NVD record for CVE-2026-23099

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-23099 status](https://www.csirts.com/badge/CVE-2026-23099)](https://www.csirts.com/cve/CVE-2026-23099)