What is CVE-2026-23416?

CVE-2026-23416 is a vulnerability in Linux. Published 2026-04-02.

Is CVE-2026-23416 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Linux

CVE-2026-23416

In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in curr_end, and then upon iterating to the next VMA updated curr_start to cu…

EPSS: 0.000 (0.7th percentile) — read the EPSS interpretation.

Affected products

Linux — versions 6c2da14ae1e0a0146587381594559027bd46c059, 6.17, 0

Public proof-of-concept exploits

bluedragonsecurity/CVE-2026-23416-POC

References

git.kernel.org/stable/c/40b3f4700e5535fbe74738cebb9379a40ec66bed
git.kernel.org/stable/c/83737e34b83a23b2a9bcf586b058b2c2a54c7c6b
git.kernel.org/stable/c/2697dd8ae721db4f6a53d4f4cbd438212a80f8dc

Frequently asked questions

What is CVE-2026-23416?: CVE-2026-23416 is a vulnerability in Linux. Published 2026-04-02.
Is CVE-2026-23416 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.