CVE-2026-23168

unknowncovered by 6 sourcesfirst seen 2026-07-20

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block device driver; - Bluetooth drivers; - Counter interface drivers; - DMA engine subsystem; - DPLL subsystem; - GPIO subsystem; - GPU drivers; - I2C subsystem; - IIO ADC drivers; - IIO subsystem; - On-Chip Interconnect management framework; - IOMMU subsystem; - IRQ chip drivers; - Modular ISDN driver; - LED subsystem; - Multiple devices driver; - UACCE accelerator framework; - MMC subsystem; - Ethernet bonding driver; - Network drivers; - Mellanox network drivers; - NVME drivers; - Device tree and open firmware driver; - PHY drivers; - x86 platform drivers; - i.MX PM domains; - SCSI subsystem; - SLIMbus drivers; - SPI subsystem; - TTY drivers; - USB Host Controller drivers; - W1 Dallas's 1-wire bus driver; - Xen hypervisor drivers; - BTRFS file system; - EFI Variable file system; - Ext4 file system; - File systems infrastructure; - FUSE (File system in Userspace); - Network file systems library; - Network file system (NFS) client; - Network file system (NFS) server daemon; - SMB network file system; - Memory Management; - Memory management; - Scheduler infrastructure; - Tracing infrastructure; - Netfilter; - NFC subsystem; - io_uring subsystem; - Perf events; - Hibernation control; - Timer subsystem; - BPF subsystem; - Floating proportions library; - Bluetooth subsystem; - CAN network layer; - Ceph Core library; - Networking core; - IPv4 networking; - IPv6 networking; - L2TP protocol; - MAC80211 subsystem; - Multipath TCP; - NET/ROM layer; - RxRPC session sockets; - Network traffic control; - SCTP protocol; - VMware vSockets driver; - Wireless networking; - ALSA AC97 driver; - Creative Sound Blaster X-Fi driver; - Texas InstrumentS Audio (ASoC/HDA) drivers; - USB sound devices

CSIRTS triage

What: Multiple security issues were discovered in the Linux kernel that could compromise the system.
Who is affected: Users of the Linux kernel are potentially affected.
Urgency: Remediation is necessary, but severity is currently unknown.
Action: Update the Linux kernel to the latest version.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2026-23168

Get an email if CVE-2026-23168 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all EPSS-scored CVEs.

Advisory coverage (6)

unknownUSN-8570-2: Linux kernel (Oracle) vulnerabilitiesubuntu · 2026-07-28
unknownUSN-8605-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu · 2026-07-24
unknownUSN-8604-1: Linux kernel (Azure) vulnerabilitiesubuntu · 2026-07-24
unknownMultiple vulnerabilities in Red Hat Linux kernel (July 24, 2026)cert-fr-avis · 2026-07-24
unknownUSN-8594-1: Linux kernel (OEM) vulnerabilitiesubuntu · 2026-07-23
unknownUSN-8570-1: Linux kernel vulnerabilitiesubuntu · 2026-07-20

External references

NVD record for CVE-2026-23168

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-23168 status](https://www.csirts.com/badge/CVE-2026-23168)](https://www.csirts.com/cve/CVE-2026-23168)