A vulnerability classified as critical was found in Linux Kernel up to 6.6.129/6.12.77/6.18.19/6.19.9/7.0-rc4. This impacts the function clsact_init. The manipulation results in use after free. This vulnerability was named CVE-2026-23413. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.
| Vendor | Product | Versions |
|---|---|---|
| linux | linux kernel | 230bb13650b0f186f540500fd5f5f7096a822a2a, 1cb6f0bae50441f4b4b32a28315853b279c7404e, 1cb6f0bae50441f4b4b32a28315853b279c7404e, 1cb6f0bae50441f4b4b32a28315853b279c7404e, 1cb6f0bae50441f4b4b32a28315853b279c7404e, f61ecf1bd5b562ebfd7d430ccb31619857e80857, 6.10, 6.6.129, 6.12.77, 6.18.19, 6.19.9, 7.0-rc4 |
Updated severity to CRITICAL, added affected versions, and corrected exploit availability.
Initial creation
