cbcvebase.
CVE-2026-23056
published 2026-02-04

CVE-2026-23056: In the Linux kernel, the following vulnerability has been resolved: uacce: implement mremap in uacce_vm_ops to return -EPERM The current uacce_vm_ops does not…

PriorityP422high7.8
EPSS
0.18%
7.4th percentile
In the Linux kernel, the following vulnerability has been resolved: uacce: implement mremap in uacce_vm_ops to return -EPERM The current uacce_vm_ops does not support the mremap operation of vm_operations_struct. Implement .mremap to return -EPERM to remind users. The reason we need to explicitly disable mremap is that when the driver does not implement .mremap, it uses the default mremap method. This could lead to a risk scenario: An application might first mmap address p1, then mremap to p2, followed by munmap(p1), and finally munmap(p2). Since the default mremap copies the original vma's vm_private_data (i.e., q) to the new vma, both munmap operations would trigger vma_close, causing q->qfr to be freed twice(qfr will be set to null here, so repeated release is ok).

Affected

61 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.162-1 (bookworm)linux 6.1.162-1 (bookworm)
debianlinux-6.1< linux 6.1.162-1 (bookworm)linux 6.1.162-1 (bookworm)
linuxlinux
linuxlinux>= 015d239ac0142ad0e26567fd890ef8d171f13709 < 78d99f062d42e3af2ca46bde1a8e46e0dfd372e378d99f062d42e3af2ca46bde1a8e46e0dfd372e3
linuxlinux>= 015d239ac0142ad0e26567fd890ef8d171f13709 < ebfa85658a39b49ec3901ceea7535b73aa0429e6ebfa85658a39b49ec3901ceea7535b73aa0429e6
linuxlinux>= 015d239ac0142ad0e26567fd890ef8d171f13709 < 75b29bdc935ff93b8e8bf6f6b4d8a4810b26e06f75b29bdc935ff93b8e8bf6f6b4d8a4810b26e06f
linuxlinux>= 015d239ac0142ad0e26567fd890ef8d171f13709 < 4c042bc71474dbe417c268f4bfb8ec196f802f074c042bc71474dbe417c268f4bfb8ec196f802f07
linuxlinux>= 015d239ac0142ad0e26567fd890ef8d171f13709 < a407ddd61b3e6afc5ccfcd1478797171cf5686eea407ddd61b3e6afc5ccfcd1478797171cf5686ee
linuxlinux>= 015d239ac0142ad0e26567fd890ef8d171f13709 < ba29b59d124e725e0377f09b2044909c91d657a1ba29b59d124e725e0377f09b2044909c91d657a1
linuxlinux>= 015d239ac0142ad0e26567fd890ef8d171f13709 < 02695347be532b628f22488300d40c4eba48b9b702695347be532b628f22488300d40c4eba48b9b7
linuxlinux_kernel>= 0 < 5.10.249-15.10.249-1
linuxlinux_kernel>= 0 < 6.1.162-16.1.162-1
linuxlinux_kernel>= 0 < 6.12.69-16.12.69-1
linuxlinux_kernel>= 0 < 6.18.8-16.18.8-1
linuxlinux_kernel>= 5.11.0 < 5.15.1995.15.199
linuxlinux_kernel>= 5.16.0 < 6.1.1626.1.162
linuxlinux_kernel>= 5.7.0 < 5.10.2495.10.249
linuxlinux_kernel>= 6.13.0 < 6.18.86.18.8
linuxlinux_kernel>= 6.2.0 < 6.6.1226.6.122
linuxlinux_kernel>= 6.7.0 < 6.12.686.12.68
ubuntulinux
ubuntulinux-aws
ubuntulinux-aws-fips
ubuntulinux-azure
ubuntulinux-azure-5.15
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.