CVE-2026-23262

25

FAUCET Score

CVE-2026-23262 addresses a vulnerability in the Linux kernel's gve driver where changing the number of network queues can lead to memory corruption or incorrect statistics reporting. This issue arises from the network interface card (NIC) potentially writing past its allocated memory region or creating reporting gaps. While kernel memory corruption is serious, the vulnerability has a low FAUCET Risk Score of 20.0/100 and an extremely low EPSS score, suggesting minimal exploitability. There is no evidence of active exploitation, public exploit code, or significant community attention for this flaw.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 5.10, < 5.10.250CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.11, < 5.15.200CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.16, < 6.1.163CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 6.2, < 6.6.124CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 6.7, < 6.12.70CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.12%

Probability of exploitation in next 30 days

EPSS Percentile

2.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0012 is in the 10th percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (53)

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm-6.8 (jammy)Fixed in: 6.8.0-1055.56~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-117.117.1~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1051.52~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux (noble)Fixed in: 6.8.0-117.117

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (noble)Fixed in: 6.8.0-1055.58

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-fips (noble)Fixed in: 6.8.0-1055.58+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp (noble)Fixed in: 6.8.0-1058.61

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1058.61+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-gke (noble)Fixed in: 6.8.0-1054.60

ubuntupatch availablevia ubuntu_usn

Product: linux-gkeop (noble)Fixed in: 6.8.0-1041.44

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm (noble)Fixed in: 6.8.0-1055.56

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency (noble)Fixed in: 6.8.0-117.117.1

ubuntupatch availablevia ubuntu_usn

Product: linux-raspi (noble)Fixed in: 6.8.0-1056.60

ubuntupatch availablevia ubuntu_usn

Product: linux-raspi-realtime (noble)Fixed in: 6.8.0-2045.46

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime (noble)Fixed in: 6.8.1-1051.52

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia (noble)Fixed in: 6.8.0-1054.57

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1054.57.1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fips (jammy)Fixed in: 5.15.0-1116.125+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1054.57~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-tegra (noble)Fixed in: 6.8.0-1024.24

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (noble)Fixed in: 6.8.0-1056.62

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-5.15 (focal)Fixed in: 5.15.0-1111.118~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-5.15 (focal)Fixed in: 5.15.0-1116.125~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fde-5.15 (focal)Fixed in: 5.15.0-1116.125~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-hwe-5.15 (focal)Fixed in: 5.15.0-185.195~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm-5.15 (focal)Fixed in: 5.15.0-1105.109~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency-hwe-5.15 (focal)Fixed in: 5.15.0-183.193~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-tegra-5.15 (focal)Fixed in: 5.15.0-1063.63~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux (jammy)Fixed in: 5.15.0-185.195

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (jammy)Fixed in: 5.15.0-1111.118

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-fips (jammy)Fixed in: 5.15.0-1111.118+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (jammy)Fixed in: 5.15.0-1116.125

ubuntupatch availablevia ubuntu_usn

Product: linux-fips (jammy)Fixed in: 5.15.0-185.195+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp (jammy)Fixed in: 5.15.0-1111.121

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-fips (jammy)Fixed in: 5.15.0-1111.121+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-gke (jammy)Fixed in: 5.15.0-1107.113

ubuntupatch availablevia ubuntu_usn

Product: linux-gkeop (jammy)Fixed in: 5.15.0-1094.102

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm (jammy)Fixed in: 5.15.0-1105.109

ubuntupatch availablevia ubuntu_usn

Product: linux-intel-iot-realtime (jammy)Fixed in: 5.15.0-1103.105

ubuntupatch availablevia ubuntu_usn

Product: linux-intel-iotg (jammy)Fixed in: 5.15.0-1106.112

ubuntupatch availablevia ubuntu_usn

Product: linux-kvm (jammy)Fixed in: 5.15.0-1103.108

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency (jammy)Fixed in: 5.15.0-183.193

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia (jammy)Fixed in: 5.15.0-1106.107

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-tegra (jammy)Fixed in: 5.15.0-1063.63

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-tegra-igx (jammy)Fixed in: 5.15.0-1052.52

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle (jammy)Fixed in: 5.15.0-1108.114

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime (jammy)Fixed in: 5.15.0-1110.119

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle-5.15 (focal)Fixed in: 5.15.0-1108.114~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-xilinx (noble)Fixed in: 6.8.0-1032.33

ubuntupatch availablevia ubuntu_usn

Product: linux-xilinx-zynqmp (jammy)Fixed in: 5.15.0-1074.78

ubuntupatch availablevia ubuntu_usn

Product: linux-raspi (jammy)Fixed in: 5.15.0-1105.108

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-5.15 (focal)Fixed in: 5.15.0-1111.121~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-intel-iotg-5.15 (focal)Fixed in: 5.15.0-1106.112~20.04.1

Vendor Advisories (12)

ubuntuUSN-8547-2

Linux kernel (Azure FIPS) vulnerabilities

ubuntuUSN-8547-1

Linux kernel vulnerabilities

ubuntuUSN-8528-1

Linux kernel (Xilinx ZynqMP) vulnerabilities

ubuntuUSN-8527-1

Linux kernel (Raspberry Pi) vulnerabilities

ubuntuUSN-8493-2

Linux kernel (Oracle) vulnerabilities

ubuntuUSN-8499-1

Linux kernel (Xilinx) vulnerabilities

ubuntuUSN-8493-1

Linux kernel vulnerabilities

ubuntuUSN-8278-2

Linux kernel (Azure) vulnerabilities

ubuntuUSN-8289-2

Linux kernel (NVIDIA) vulnerabilities

ubuntuUSN-8296-2

Linux kernel (NVIDIA Tegra) vulnerabilities

ubuntuUSN-8289-1

Linux kernel (NVIDIA) vulnerabilities

ubuntuUSN-8278-1

Linux kernel vulnerabilities

References

git.kernel.org / stable/c/11f8311f69e4c361717371b4901ff92daeb76e9c

Patch

git.kernel.org / stable/c/7b9ebcce0296e104a0d82a6b09d68564806158ff

Patch

git.kernel.org / stable/c/837c662f47dac43efa1aef2dd433c6b4b4c073af

Patch

git.kernel.org / stable/c/9d93332397405b62a3300b22d04ac65d990b91ff

Patch

git.kernel.org / stable/c/9fa0a755db3e1945fe00f73fe27d85ef6c8818b7

Patch

git.kernel.org / stable/c/df54838ab61826ecc1a562ffa5e280c3ab7289a7

Patch

git.kernel.org / stable/c/f432f7613c220db32c2c6942420daf7b3f2e7d7e

Patch