CVE-2026-23094
Unknown Unknown - Not Provided

Improper Sysfs Access in Linux uacce Causes System Crash

Publication date: 2026-02-04

Last updated on: 2026-03-17

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isolation feature. If the driver implements the isolate_err_threshold_read and isolate_err_threshold_write callback functions, uacce will create sysfs files now. Users can read and configure the isolation policy through sysfs. Currently, sysfs files are created as long as either isolate_err_threshold_read or isolate_err_threshold_write callback functions are present. However, accessing a non-existent callback function may cause the system to crash. Therefore, intercept the creation of sysfs if neither read nor write exists; create sysfs if either is supported, but intercept unsupported operations at the call site.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-04
Last Modified
2026-03-17
Generated
2026-07-06
AI Q&A
2026-02-04
EPSS Evaluated
2026-07-05
NVD
CVE-2026-23094
EUVD
EUVD-2026-5448

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel From 6.7 (inc) to 6.12.68 (exc)
linux linux_kernel From 6.13 (inc) to 6.18.8 (exc)
linux linux_kernel 6.19
linux linux_kernel From 6.3 (inc) to 6.6.122 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's uacce subsystem, which supports device isolation features. The issue arises because sysfs files are created if either the isolate_err_threshold_read or isolate_err_threshold_write callback functions are present. However, if a callback function does not actually exist and is accessed, it can cause the system to crash. The fix involves preventing the creation of sysfs files when neither callback function exists, and intercepting unsupported operations at the call site to avoid crashes.

Impact Analysis

This vulnerability can cause the system to crash if sysfs files are accessed when the corresponding callback functions are not implemented. Such crashes can lead to system instability, potential downtime, and disruption of services relying on the Linux kernel's uacce device isolation features.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23094. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart