Skip to main content
CVE-2026-23097VulnerabilityPublished Updated

Red Hat Security Advisory: kernel security update

Affects Linux kernelSource GCVE Database

0
Compare

Mentioned vulnerabilities

Authoritative record:CVE-2026-23097· Medium

Not known to be exploited · fixed in Red Hat package updates : update Linux kernel when convenient.

Data as of 1 Nov 2026, 00:39 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

Patch
Available – fixed in e7396d23f9d5739f56cf9ab430c3a169f5508394, b75070823b89009f5123fd0e05a8e0c3d39937c1, b7880cb166ab62c2409046b2347261abf701530e +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 4 Feb 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 31 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • >=5.9.9 <5.10
Fixed in
  • e7396d23f9d5739f56cf9ab430c3a169f5508394
  • b75070823b89009f5123fd0e05a8e0c3d39937c1
  • b7880cb166ab62c2409046b2347261abf701530e
  • ad97b9a55246eb940a26ac977f80892a395cabf9
  • 526394af4e8ade89cacd1a9ce2b97712712fcc34
  • 5edb9854f8df5428b40990a1c7d60507da5bd330
  • 5.10
  • 1b68efce6dd483d22f50d0d3800c4cfda14b1305
LinuxLinuxAffected
  • =5.10
Fixed in–

AI-suggested

Red Hat has released updated kernel packages that fix these vulnerabilities. Users should apply the security update for Red Hat Enterprise Linux 9.6 Extended Update Support and reboot their systems to ensure the fixes take effect. Refer to the official Red Hat article (https://access.redhat.com/articles/11258) for update instructions.

Description

Red Hat has issued a security advisory for a kernel update addressing two vulnerabilities: a denial of service caused by a deadlock in hugetlb folio migration (CVE-2026-23097) and a heap overflow in the NFSv4.0 LOCK replay cache (CVE-2026-31402). These issues affect the Linux kernel in Red Hat Enterprise Linux 9.6 Extended Update Support and related variants. The update requires a system reboot to take effect.

References

Community reviews

Loading reviews…