Vulnerability in Linux
CVE-2026-23094
In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isolation feature. If the driver implements the isolate_err_threshold_read and isolate_err_threshold_write callback functions, uacce will create sysfs files now. Users can read and configure the isolation policy through sysfs. Currently, sysfs files are created as long as either isolate_err_threshold_read or isolate_err_threshold_write callback functions are present. However, accessing a non-existent callback function may cause the system to crash. Therefore, intercept the creation of sysfs if neither read nor write exists; create sysfs if either is supported, but intercept unsupported operations at the call site.
EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions e3e289fbc0b520cf469469e8cdba84a50424eb65, 6.3, 0
- Linux Linux_kernel — versions 6.19
References
Frequently asked questions
- What is CVE-2026-23094?
- CVE-2026-23094 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-02-04.
- How severe is CVE-2026-23094?
- Medium severity. CVSS v3 base score is 5.5 out of 10.