Skip to main content
CVE-2026-23010VulnerabilityPublished Updated

SUSE · security update for kernel

Affects SUSESource GCVE Database

0
Compare

Not known to be exploited.

Data as of 30 Oct 2026, 06:59 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
0.2% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 17 Mar 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: evidence found.

    Public exploit code: GitHub proofs of concept

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), GitHub proofs of concept, the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

Affected software

ProductAffectedFixed in
SUSE Product Security Team SUSEAffected
  • Red Hat
  • Red Hat Enterprise Linux
  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Enterprise Linux BaseOS (v. 10)
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)
  • SUSE
  • noarch
  • kernel-abi-stablelists-6.12.0-124.45.1.el10_1.noarch
  • kernel-doc-6.12.0-124.45.1.el10_1.noarch
  • x86_64
Fixed in–

AI-suggested

Red Hat has released an official security update for Red Hat Enterprise Linux 10 that addresses this vulnerability. Users should apply the updated kernel packages as described in the Red Hat advisory RHSA-2026:4723 and reboot their systems to activate the fix. Patch status is confirmed as fixed in the updated kernel packages provided by Red Hat.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: Linux kernel: Use-after-free in IPv6 address deletion may lead to a denial of service (CVE-2026-23010) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

Community reviews

Loading reviews…