CVE-2026-23384 — Use of Uninitialized Resource in Linux
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 94.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/ionic: Fix kernel stack leak in ionic_create_cq()
struct ionic_cq_resp resp {
__u32 cqid[2]; // offset 0 - PARTIALLY SET (see below)
__u8 udma_mask; // offset 8 - SET (resp.udma_mask = vcq->udma_mask)
__u8 rsvd[7]; // offset 9 - NEVER SET udma_mask & BIT(udma_idx)). The array has 2 entries but
udma_count could be 1, meaning cqid[1] might never be written via
ionic_create_cq_common(). If udma_mask only has bit 0 set, cqid[…
Affected Packages4 packages
▶CVEListV5linux/linuxe8521822c733c6deab0f339843cd37cd62c12795 — a6f3e0fa8e862f220c26c2f27e5ddc42eb82ad3e+3
🔴Vulnerability Details
3OSV▶
CVE-2026-23384: In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ionic_create_cq() struct ionic_cq_resp resp {↗2026-03-25
GHSA▶
GHSA-6pc7-mm64-g3v9: In the Linux kernel, the following vulnerability has been resolved:
RDMA/ionic: Fix kernel stack leak in ionic_create_cq()
struct ionic_cq_resp resp↗2026-03-25