CVE-2026-23329 — Linux vulnerability
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 94.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
libie: don't unroll if fwlog isn't supported
The libie_fwlog_deinit() function can be called during driver unload
even when firmware logging was never properly initialized. This led to call
trace:
[ 148.576156] Oops: Oops: 0000 [#1] SMP NOPTI
[ 148.576167] CPU: 80 UID: 0 PID: 12843 Comm: rmmod Kdump: loaded Not tainted 6.17.0-rc7next-queue-3oct-01915-g06d79d51cf51 #1 PREEMPT(full)
[ 148.576177] Hardware name: HPE ProLiant DL3…
Affected Packages4 packages
▶CVEListV5linux/linux641585bc978e0a1170ca8f12fbb1468b3874a2db — 0138d1cdb19fa49181a5aaba32427f1787cb3935+3
🔴Vulnerability Details
3OSV▶
CVE-2026-23329: In the Linux kernel, the following vulnerability has been resolved: libie: don't unroll if fwlog isn't supported The libie_fwlog_deinit() function can↗2026-03-25
GHSA▶
GHSA-w7x9-wq5x-hghj: In the Linux kernel, the following vulnerability has been resolved:
libie: don't unroll if fwlog isn't supported
The libie_fwlog_deinit() function c↗2026-03-25