CVE-2026-23474

CVE-2026-23474 addresses a buffer overflow vulnerability in the Linux kernel's mtd subsystem, specifically within the RedBoot partition table parser. This flaw could lead to a boot crash (kernel oops) on systems with CONFIG_FORTIFY_SOURCE=y enabled, as `memcmp` incorrectly read beyond allocated buffer boundaries. The primary impact is a denial of service, preventing the system from booting if a specially crafted partition table is encountered. However, the vulnerability has a very low EPSS score and FAUCET risk score, suggesting limited broader exploitability. There is no evidence of active exploitation, nor are there any public exploit modules or proof-of-concept code available, with community discussion and media coverage being minimal.