PT-2026-26101 · Linux · Linux Kernel

·

CVE-2026-23251

·

Published

2026-01-01

·

Updated

2026-08-30

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.9 through 6.10
Description The Linux kernel contains a flaw where the xfarray and xfblob destructors are called with an invalid pointer. This occurs when a valid pointer is not present, potentially leading to system instability or unexpected behavior. The issue was addressed by ensuring the destructors are only invoked when a valid pointer exists, and by nullifying the pointer afterward. This correction impacts numerous commits merged between kernel versions 6.9 and 6.10.
Recommendations Update to a version beyond 6.10.

Exploit

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-03487
CVE-2026-23251

Affected Products

Linux Kernel