CVE-2026-23115

Overview: CVE-2026-23115 addresses a race condition in the Linux kernel's serial driver, specifically affecting how tty devices are linked to their ports. This vulnerability occurs when user-space attempts to open a console before the tty->port is properly configured, leading to a kernel crash. It primarily impacts systems using Qualcomm SoCs with fast boot sequences and a serial console. Severity: The vulnerability has a FAUCET Risk Score of 20/100, indicating a low to moderate severity. The attack vector is local, requiring user-space interaction to trigger the race condition. The complexity is relatively low, as it can be consistently reproduced under specific boot conditions. The potential impact is a kernel crash, leading to system instability and denial of service. Exploitation Status: There is no evidence of active exploitation for CVE-2026-23115. No exploit code is publicly available on platforms like Metasploit, Nuclei, or ExploitDB. Community attention and media coverage are minimal, with zero mentions on social media or in news articles, suggesting it is not a widely discussed or exploited vulnerability.