CVE-2026-23024

Medium

Description

In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak of flow steer list on rmmod The flow steering list maintains entries that are added and removed as ethtool creates and deletes flow steering rules. Module removal with active entries causes memory leak as the list is not properly cleaned up. Prevent this by iterating through the remaining entries in the list and freeing the associated memory during module removal. Add a spinlock (flow_steer_list_lock) to protect the list access from multiple threads.

SeverityMedium
CVSS5.5
Exploit probability—
ProductLinux Kernel
PublishedJan 31, 2026
First seenJan 31, 2026

How to fix

Update
  • linux linux_kernel6.18.6 or later

Affected products

ProductAffected versionsFixed in
linux linux_kernel6.17.1 ≤ v < 6.18.6, 6.17, 6.196.18.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-23024 · Linux Kernel · Dark Radar