Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23460

In the Linux kernel, the following vulnerability has been resolved: net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect syzkaller reported a bug [1], and the reproducer is available at [2]. ROSE sockets use four sk->sk_state values: TCP_CLOSE, TCP_LISTEN, TCP_SYN_SENT, and TCP_ESTABLISHED. rose_connect() already rejects calls for TCP_ESTABLISHED (-EISCONN) and TCP_CLOSE with SS_CONNECTING (-ECONNREFUSED), but lacks a check for TCP_SYN_SENT. When rose_connect() is called
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:99b44dd7b91ce1be2429f2bddc7cc720e3a6e11a863ed600d2c9b4d9c3bf77b6
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/rose/af_rose.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessTh…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/rose/af_rose.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c85fe6580e86947ca07907ebf4363a73c156fda7","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"a753844d2a8136f090123c8fb1ff6c7f6ee7c2b3","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"c2ab74c12932e52cfa1e7e4582d42b0c8bec96c7","status":"affected","version":"1da177e4c3f41524e886b7f1b8a…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/rose/af_rose.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.12"},{"lessThan":"2.6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.203","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.167","versionType":"semver"},{"lessTh…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/rose/af_rose.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c85fe6580e86947ca07907ebf4363a73c156fda7","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"a753844d2a8136f090123c8fb1ff6c7f6ee7c2b3","status":"affected","version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","versionType":"git"},{"lessThan":"c2ab74c12932e52cfa1e7e4582d42b0c8bec96c7","status":"affected","version":"1da177e4c3f41524e886b7f1b8a…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0c3e8bff808f17ad37a51d8e719eed22c7863120"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/0c9fb70a206a8734e10468ecc24d57c7596cf64e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/508f49ccbe0329641bb681f7d0052bb4e5943252"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/a12254050e3050f1011cd24f3b880a6882d0139d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/a753844d2a8136f090123c8fb1ff6c7f6ee7c2b3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/c2ab74c12932e52cfa1e7e4582d42b0c8bec96c7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/c85fe6580e86947ca07907ebf4363a73c156fda7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/e1f0a18c9564cdb16523c802e2c6fe5874e3d944"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d60334c526c943a6acdd5d02ffab5ee316d4e59baaaca607098c99471b8b0c52 · sha256:9f106af2f63eb369… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer