CVE-2026-23446

22

FAUCET Score

CVE-2026-23446 is a vulnerability in the Linux kernel's aqc111 USB network driver, where an incorrect power management call during suspend can lead to a system hang. This flaw causes a deadlock by blocking the networking stack, potentially rendering the affected system unresponsive. The vulnerability's FAUCET Risk Score is 20.0/100, indicating a relatively low risk, and no CVSS score is provided. There is no evidence of active exploitation, public exploit code, or significant community attention, with minimal mentions and media coverage identified.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		>= 5.0.1, < 5.10.253CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.11, < 5.15.203CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.16, < 6.1.167CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 6.2, < 6.6.130CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 6.7, < 6.12.78CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.13%

Probability of exploitation in next 30 days

EPSS Percentile

2.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0013 is in the 20th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (37)

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1064.72~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1056.57~22.04.2

ubuntupatch availablevia ubuntu_usn

Product: linux (noble)Fixed in: 6.8.0-136.136

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp (noble)Fixed in: 6.8.0-1064.72

ubuntupatch availablevia ubuntu_usn

Product: linux-gke (noble)Fixed in: 6.8.0-1059.67

ubuntupatch availablevia ubuntu_usn

Product: linux-gkeop (noble)Fixed in: 6.8.0-1046.50

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime (noble)Fixed in: 6.8.1-1056.57

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-tegra-5.15 (focal)Fixed in: 5.15.0-1064.66~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-hwe-5.15 (focal)Fixed in: 5.15.0-186.196~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency-hwe-5.15 (focal)Fixed in: 5.15.0-184.194~20.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux (jammy)Fixed in: 5.15.0-186.196

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp (jammy)Fixed in: 5.15.0-1112.122

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-fips (jammy)Fixed in: 5.15.0-1112.122+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-gke (jammy)Fixed in: 5.15.0-1108.114

ubuntupatch availablevia ubuntu_usn

Product: linux-gkeop (jammy)Fixed in: 5.15.0-1095.103

ubuntupatch availablevia ubuntu_usn

Product: linux-kvm (jammy)Fixed in: 5.15.0-1104.109

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency (jammy)Fixed in: 5.15.0-184.194

ubuntupatch availablevia ubuntu_usn

Product: linux-realtime (jammy)Fixed in: 5.15.0-1111.120

ubuntupatch availablevia ubuntu_usn

Product: linux-xilinx-zynqmp (jammy)Fixed in: 5.15.0-1075.79

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1064.72+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1059.62~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia (noble)Fixed in: 6.8.0-1059.62

ubuntupatch availablevia ubuntu_usn

Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1059.62.1

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1058.61~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-136.136.2~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-fips (noble)Fixed in: 6.8.0-136.136+fips2

ubuntupatch availablevia ubuntu_usn

Product: linux-lowlatency (noble)Fixed in: 6.8.0-136.136.2

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle (noble)Fixed in: 6.8.0-1058.61

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fde (jammy)Fixed in: 5.15.0-1117.126

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (jammy)Fixed in: 5.15.0-1117.126

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle (jammy)Fixed in: 5.15.0-1109.115

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fde-6.8 (jammy)Fixed in: 6.8.0-1062.69~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fips (noble)Fixed in: 6.8.0-1063.71+fips2

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fde (noble)Fixed in: 6.8.0-1062.69

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-6.8 (jammy)Fixed in: 6.8.0-1063.71~22.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (noble)Fixed in: 6.8.0-1063.71

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (noble)Fixed in: 6.8.0-1061.64

Vendor Advisories (15)

ubuntuUSN-8610-1

Linux kernel (Azure CVM) vulnerabilities

ubuntuUSN-8575-3

Linux kernel vulnerabilities

ubuntuUSN-8609-1

Linux kernel (Azure CVM) vulnerabilities

ubuntuUSN-8608-1

Linux kernel (Azure FIPS) vulnerabilities

ubuntuUSN-8607-1

Linux kernel (Azure CVM) vulnerabilities

ubuntuUSN-8606-1

Linux kernel (Azure) vulnerabilities

ubuntuUSN-8595-2

Linux kernel (AWS) vulnerabilities

ubuntuUSN-8596-1

Linux kernel (NVIDIA) vulnerabilities

ubuntuUSN-8595-1

Linux kernel (Oracle) vulnerabilities

ubuntuUSN-8574-2

Linux kernel vulnerabilities

ubuntuUSN-8576-1

Linux kernel (NVIDIA Tegra) vulnerabilities

ubuntuUSN-8575-1

Linux kernel vulnerabilities

ubuntuUSN-8574-1

Linux kernel (GCP FIPS) vulnerabilities

ubuntuUSN-8567-1

Linux kernel vulnerabilities

microsoft2026-Apr/CVE-2026-23446Moderate

net: usb: aqc111: Do not perform PM inside suspend callback

References

cert-portal.siemens.com / productcert/html/ssa-019113.html

cert-portal.siemens.com / productcert/html/ssa-082556.html

git.kernel.org / stable/c/069c8f5aebe4d5224cf62acc7d4b3486091c658a

Patch

git.kernel.org / stable/c/3267bcb744ee8a2feabaa7ab69473f086f67fd71

Patch

git.kernel.org / stable/c/4de6a43e8ecf961feabddf0e9d6911081d2ed218

Patch

git.kernel.org / stable/c/621f2f43741b51f62d767eb4752fbcefe2526926

Patch

git.kernel.org / stable/c/98e8aed64614b0c199d5f0391fbe1a4331cb5773

Patch

git.kernel.org / stable/c/b87f361d41f9a7f1f6c426947ca815651c481376

Patch

git.kernel.org / stable/c/cc06ac99fd78839b2d38850785731ef131d9ae26

Patch

git.kernel.org / stable/c/d3e32a612c6391ca9b7c183aeec22b4fd24c300c

Patch