Vulnerability in Linux
CVE-2026-23397
In the Linux kernel, the following vulnerability has been resolved: nfnetlink_osf: validate individual option lengths in fingerprints nfnl_osf_add_callback() validates opt_num bounds and string NUL-termination but does not check individu…
EPSS: 0.000 (6.3th percentile) — read the EPSS interpretation.
Affected products
- Linux — versions 11eeef41d5f63c7d2f7fdfcc733eb7fb137cc384, 2.6.31, 0
References
- git.kernel.org/stable/c/e9cf17b91e733fec725ebcc0b3098bc5ccd505e0
- git.kernel.org/stable/c/3c11b5c2436a3a5b450612ab160e3a525b28cfb5
- git.kernel.org/stable/c/aa0574182c46963c3cdb8cde46ec93aca21100d8
- git.kernel.org/stable/c/224f4678812e1a7bc8341bcb666773a0aec5ea6f
- git.kernel.org/stable/c/ec8bf0571b142f29dc0b68ae2ac3952f7a464b38
- git.kernel.org/stable/c/3932620c04c2938c93c0890c225960d3d34ba355
- git.kernel.org/stable/c/4c6aa008b913e808c4f4d3cde36cb1d9bb5967c6
- git.kernel.org/stable/c/dbdfaae9609629a9569362e3b8f33d0a20fd783c