Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-23367

21
FAUCET Score

CVE-2026-23367 addresses a vulnerability within the Linux kernel's WiFi radiotap parser. This flaw arises from the improper handling of radiotap data containing undefined field 18, which could lead to the comparison of an uninitialized value. While specific CVSS metrics are not provided, the vulnerability has a very low EPSS score of 0.00024 and a FAUCET Risk Score of 20.0/100, indicating low severity and exploitability probability. There is currently no evidence of active exploitation, no public exploit code available, and minimal community or media attention surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 2.6.34.1, < 5.10.253CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 5.15.203CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.167CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.130CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.12.77CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.12%
Probability of exploitation in next 30 days
EPSS Percentile
2.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0012 is in the 16th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (39)

microsoftpatch availablevia msrc
Product: 20956-17084Fixed in: 6.6.130.1-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.126.1-1 on Azure Linux 3.0Fixed in: 6.6.130.1-1
ubuntupatch availablevia ubuntu_usn
Product: linux (noble)Fixed in: 6.8.0-136.136
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (noble)Fixed in: 6.8.0-1064.72
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (noble)Fixed in: 6.8.0-1059.67
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (noble)Fixed in: 6.8.0-1046.50
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (noble)Fixed in: 6.8.1-1056.57
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-tegra-5.15 (focal)Fixed in: 5.15.0-1064.66~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-5.15 (focal)Fixed in: 5.15.0-186.196~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-5.15 (focal)Fixed in: 5.15.0-184.194~20.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux (jammy)Fixed in: 5.15.0-186.196
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (jammy)Fixed in: 5.15.0-1112.122
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (jammy)Fixed in: 5.15.0-1112.122+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (jammy)Fixed in: 5.15.0-1108.114
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (jammy)Fixed in: 5.15.0-1095.103
ubuntupatch availablevia ubuntu_usn
Product: linux-kvm (jammy)Fixed in: 5.15.0-1104.109
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (jammy)Fixed in: 5.15.0-184.194
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (jammy)Fixed in: 5.15.0-1111.120
ubuntupatch availablevia ubuntu_usn
Product: linux-xilinx-zynqmp (jammy)Fixed in: 5.15.0-1075.79
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1064.72~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1059.62~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (noble)Fixed in: 6.8.0-1059.62
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1059.62.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1058.61~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-136.136.2~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (noble)Fixed in: 6.8.0-136.136+fips2
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (noble)Fixed in: 6.8.0-136.136.2
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (noble)Fixed in: 6.8.0-1058.61
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde (jammy)Fixed in: 5.15.0-1117.126
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (jammy)Fixed in: 5.15.0-1117.126
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (jammy)Fixed in: 5.15.0-1109.115
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde-6.8 (jammy)Fixed in: 6.8.0-1062.69~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (noble)Fixed in: 6.8.0-1063.71+fips2
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde (noble)Fixed in: 6.8.0-1062.69
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-6.8 (jammy)Fixed in: 6.8.0-1063.71~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (noble)Fixed in: 6.8.0-1063.71
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (noble)Fixed in: 6.8.0-1061.64
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1064.72+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1056.57~22.04.2

Vendor Advisories (15)

ubuntuUSN-8610-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8575-3

Linux kernel vulnerabilities

Jul 24, 2026
ubuntuUSN-8609-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8608-1

Linux kernel (Azure FIPS) vulnerabilities

Jul 24, 2026
ubuntuUSN-8607-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8606-1

Linux kernel (Azure) vulnerabilities

Jul 24, 2026
ubuntuUSN-8595-2

Linux kernel (AWS) vulnerabilities

Jul 24, 2026
ubuntuUSN-8596-1

Linux kernel (NVIDIA) vulnerabilities

Jul 23, 2026
ubuntuUSN-8595-1

Linux kernel (Oracle) vulnerabilities

Jul 23, 2026
ubuntuUSN-8574-2

Linux kernel vulnerabilities

Jul 23, 2026
ubuntuUSN-8576-1

Linux kernel (NVIDIA Tegra) vulnerabilities

Jul 21, 2026
ubuntuUSN-8575-1

Linux kernel vulnerabilities

Jul 21, 2026
ubuntuUSN-8574-1

Linux kernel (GCP FIPS) vulnerabilities

Jul 21, 2026
ubuntuUSN-8567-1

Linux kernel vulnerabilities

Jul 20, 2026
microsoft2026-Mar/CVE-2026-23367Important

wifi: radiotap: reject radiotap with unknown bits

Mar 10, 2026

References

git.kernel.org / stable/c/129c8bb320a7cef692c78056ef8e89a2a12ba448
Patch
git.kernel.org / stable/c/2a60c588d5d39ad187628f58395c776a97fd4323
Patch
git.kernel.org / stable/c/2f8ceeba670610d66f77def32011f48de951d781
Patch
git.kernel.org / stable/c/6f80f6a60f5d87e5de5fb2732751fce799991c24
Patch
git.kernel.org / stable/c/703fa979badbba83d31cd011606d060bfb8b0d1d
Patch
git.kernel.org / stable/c/c854758abe0b8d86f9c43dc060ff56a0ee5b31e0
Patch
git.kernel.org / stable/c/d1d1d3c50095928624a95b67a6d7ccc3a18f2215
Patch
git.kernel.org / stable/c/e664971759a0e5570b50c6592e58a7f97d55e992
Patch