The Linux kernel vulnerability CVE-2026-23052 involves the ftrace subsystem's memory allocation logic. Specifically, the pg_remaining calculation in ftrace_process_locs() assumes that ENTRIES_PER_PAGE multiplied by 2^order equals the actual capacity of the allocated page group. However, because ENTRIES_PER_PAGE is computed via integer division (PAGE_SIZE / ENTRY_SIZE), when PAGE_SIZE is not a multiple of ENTRY_SIZE, the actual capacity is larger than assumed. This causes pg_remaining to be underestimated, resulting in excessive memory allocation and kernel warnings. A similar issue in ftrace_allocate_records() can also cause over-allocation. These flaws have been fixed in Linux kernel versions 6.17.0 and later. Ubuntu has released security updates addressing this and other kernel vulnerabilities, requiring system updates and reboots. The update also requires recompilation of third-party kernel modules due to ABI changes.

The vulnerability can cause the Linux kernel to allocate more memory than intended in the ftrace subsystem, potentially leading to kernel warnings and instability. While the advisory notes that an attacker could possibly use these issues to compromise the system, no known exploits are reported in the wild. The impact is considered medium severity, reflecting the potential for system compromise but no confirmed active exploitation.

Official patches are available and have been released by Ubuntu for affected Linux kernel versions. Users should apply the updates promptly and reboot their systems to ensure the fixes take effect. Due to an ABI change in the kernel updates, recompilation and reinstallation of all third-party kernel modules are required. Follow the vendor's update instructions carefully to fully remediate the vulnerability.