CVE-2026-23094
Unknown Unknown - Not Provided
Improper Sysfs Access in Linux uacce Causes System Crash

Publication date: 2026-02-04

Last updated on: 2026-03-17

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isolation feature. If the driver implements the isolate_err_threshold_read and isolate_err_threshold_write callback functions, uacce will create sysfs files now. Users can read and configure the isolation policy through sysfs. Currently, sysfs files are created as long as either isolate_err_threshold_read or isolate_err_threshold_write callback functions are present. However, accessing a non-existent callback function may cause the system to crash. Therefore, intercept the creation of sysfs if neither read nor write exists; create sysfs if either is supported, but intercept unsupported operations at the call site.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-04
Last Modified
2026-03-17
Generated
2026-06-16
AI Q&A
2026-02-04
EPSS Evaluated
2026-06-15
NVD
CVE-2026-23094
EUVD
EUVD-2026-5448
Affected Vendors & Products
Showing 9 associated CPEs
Vendor Product Version / Range
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel From 6.7 (inc) to 6.12.68 (exc)
linux linux_kernel From 6.13 (inc) to 6.18.8 (exc)
linux linux_kernel 6.19
linux linux_kernel From 6.3 (inc) to 6.6.122 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's uacce subsystem, which supports device isolation features. The issue arises because sysfs files are created if either the isolate_err_threshold_read or isolate_err_threshold_write callback functions are present. However, if a callback function does not actually exist and is accessed, it can cause the system to crash. The fix involves preventing the creation of sysfs files when neither callback function exists, and intercepting unsupported operations at the call site to avoid crashes.

Impact Analysis

This vulnerability can cause the system to crash if sysfs files are accessed when the corresponding callback functions are not implemented. Such crashes can lead to system instability, potential downtime, and disruption of services relying on the Linux kernel's uacce device isolation features.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23094. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart