CVE-2023-26605

HIGH

Linux kernel <6.0.8 - Use After Free

Title source: llm
STIX 2.1

Description

In the Linux kernel 6.0.8, there is a use-after-free in inode_cgwb_move_to_attached in fs/fs-writeback.c, related to __list_del_entry_valid.

References (3)

Core 3

Scores

CVSS v3 7.8
EPSS 0.0037
EPSS Percentile 29.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (1)
linux/linux_kernel 5.15.75 - 5.15.81
Published Feb 26, 2023
Tracked Since Feb 18, 2026