Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-23145

20
FAUCET Score

CVE-2026-23145 is a vulnerability in the Linux kernel's ext4 filesystem, specifically a reference count leak in the ext4_xattr_inode_update_ref function. This bug, discovered during code review, affects the handling of extended attributes. Given its nature as a memory leak within the kernel, the potential impact is likely limited to system instability or denial of service, though a CVSS score is not available. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
>= 5.10.246, < 5.10.249CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.15.195, < 5.15.199CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.4.301, < 5.5CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.1.157, < 6.1.162CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.12.54, < 6.12.67CPE match
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.12%
Probability of exploitation in next 30 days
EPSS Percentile
2.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0012 is in the 16th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (54)

ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-5.15 (focal)Fixed in: 5.15.0-1099.102~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (jammy)Fixed in: 5.15.0-1099.102
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.17 (noble)Fixed in: 6.17.0-1021.24~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.17 (noble)Fixed in: 6.17.0-1018.20~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oem-6.17 (noble)Fixed in: 6.17.0-1030.30
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (jammy)Fixed in: 5.15.0-1099.102
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde-6.17 (noble)Fixed in: 6.17.0-1018.18~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-6.17 (noble)Fixed in: 6.17.0-1021.21~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm-6.8 (jammy)Fixed in: 6.8.0-1055.56~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-117.117.1~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1051.52~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (noble)Fixed in: 6.8.0-117.117
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (noble)Fixed in: 6.8.0-1055.58
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-fips (noble)Fixed in: 6.8.0-1055.58+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (noble)Fixed in: 6.8.0-1058.61
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1058.61+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (noble)Fixed in: 6.8.0-1054.60
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (noble)Fixed in: 6.8.0-1041.44
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (noble)Fixed in: 6.8.0-1055.56
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (noble)Fixed in: 6.8.0-117.117.1
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (noble)Fixed in: 6.8.0-1056.60
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi-realtime (noble)Fixed in: 6.8.0-2045.46
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (noble)Fixed in: 6.8.1-1051.52
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx-zynqmp (jammy)Fixed in: 5.15.0-1070.74
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (noble)Fixed in: 6.8.0-1054.57
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1054.57.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1054.57~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra (noble)Fixed in: 6.8.0-1024.24
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (noble)Fixed in: 6.8.0-1056.62
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra-5.15 (focal)Fixed in: 5.15.0-1057.57~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx (noble)Fixed in: 6.8.0-1032.33
ubuntupatch availablevia ubuntu_usn
Product: linux-aws-5.15 (focal)Fixed in: 5.15.0-1105.112~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-5.15 (focal)Fixed in: 5.15.0-175.185~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (jammy)Fixed in: 5.15.0-176.186
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (jammy)Fixed in: 5.15.0-1105.112
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (jammy)Fixed in: 5.15.0-1105.114
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (jammy)Fixed in: 5.15.0-1101.107
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (jammy)Fixed in: 5.15.0-1088.96
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (jammy)Fixed in: 5.15.0-175.185
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (jammy)Fixed in: 5.15.0-1100.101
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (jammy)Fixed in: 5.15.0-1102.108
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-5.15 (focal)Fixed in: 5.15.0-176.186~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra (jammy)Fixed in: 5.15.0-1057.57
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra-igx (jammy)Fixed in: 5.15.0-1046.46
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iot-realtime (jammy)Fixed in: 5.15.0-1097.99
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (jammy)Fixed in: 5.15.0-1104.113
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (jammy)Fixed in: 5.15.0-176.186+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (jammy)Fixed in: 5.15.0-1105.114+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (jammy)Fixed in: 5.15.0-1110.119+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iotg-5.15 (focal)Fixed in: 5.15.0-1100.106~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-5.15 (focal)Fixed in: 5.15.0-1102.108~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (jammy)Fixed in: 5.15.0-1110.119
ubuntupatch availablevia ubuntu_usn
Product: linux-intel-iotg (jammy)Fixed in: 5.15.0-1100.106
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (jammy)Fixed in: 5.15.0-1097.102

Vendor Advisories (22)

ubuntuUSN-8605-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8604-1

Linux kernel (Azure) vulnerabilities

Jul 24, 2026
ubuntuUSN-8594-1

Linux kernel (OEM) vulnerabilities

Jul 23, 2026
ubuntuUSN-8570-1

Linux kernel vulnerabilities

Jul 20, 2026
ubuntuUSN-8499-1

Linux kernel (Xilinx) vulnerabilities

Jul 2, 2026
ubuntuUSN-8278-2

Linux kernel (Azure) vulnerabilities

May 26, 2026
ubuntuUSN-8289-2

Linux kernel (NVIDIA) vulnerabilities

May 25, 2026
ubuntuUSN-8296-2

Linux kernel (NVIDIA Tegra) vulnerabilities

May 25, 2026
ubuntuUSN-8289-1

Linux kernel (NVIDIA) vulnerabilities

May 20, 2026
ubuntuUSN-8278-1

Linux kernel vulnerabilities

May 19, 2026
ubuntuUSN-8275-1

Linux kernel (Xilinx ZynqMP) vulnerabilities

May 19, 2026
ubuntuUSN-8180-6

Linux kernel (Raspberry Pi) vulnerabilities

May 11, 2026
ubuntuUSN-8180-5

Linux kernel (IBM) vulnerabilities

Apr 24, 2026
ubuntuUSN-8180-4

Linux kernel (Azure FIPS) vulnerabilities

Apr 23, 2026
ubuntuUSN-8180-3

Linux kernel vulnerabilities

Apr 23, 2026
ubuntuUSN-8188-1

Linux kernel (HWE) vulnerabilities

Apr 17, 2026
ubuntuUSN-8187-1

Linux kernel (NVIDIA) vulnerabilities

Apr 17, 2026
ubuntuUSN-8186-1

Linux kernel (Real-time) vulnerabilities

Apr 17, 2026
ubuntuUSN-8180-2

Linux kernel (FIPS) vulnerabilities

Apr 17, 2026
ubuntuUSN-8180-1

Linux kernel vulnerabilities

Apr 16, 2026
ubuntuUSN-8162-1

Linux kernel (NVIDIA Tegra) vulnerabilities

Apr 9, 2026
redhatCVE-2026-23145Low

kernel: ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref

Feb 14, 2026

References

git.kernel.org / stable/c/06e26287f2e349a28ad363941ffd9076bfed8b2e
Patch
git.kernel.org / stable/c/0b06cde92f2f960f4ebe3c988c69f2711f2a24dc
Patch
git.kernel.org / stable/c/3b00c16e42428a1ecd3a5eb9cc37f8ad9bd47626
Patch
git.kernel.org / stable/c/6241cd1d0acc2363016ac55b8773ba1332dd59d7
Patch
git.kernel.org / stable/c/7c9f059c3d531a12d7ad96cd34a44b8af7c00d5f
Patch
git.kernel.org / stable/c/8e8542c539927ae3898a4d02941f84e252e2dea1
Patch
git.kernel.org / stable/c/d250bdf531d9cd4096fedbb9f172bb2ca660c868
Patch