Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from userspace to kernelspace, and instead directly references the memory, which can cause problems if invalid data is passed from userspace. Fix this all up by correctly copying the memory before accessing it within the kernel.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 3.2, < 5.10.251 |
References
- https://git.kernel.org/stable/c/061cfeb560aa3ddc174153dbe5be9d0b55eb7248Patch
- https://git.kernel.org/stable/c/0634e8d650993602fc5b389ff7ac525f6542e141Patch
- https://git.kernel.org/stable/c/120adae7b42faa641179270c067864544a50ab69Patch
- https://git.kernel.org/stable/c/1c008ad0f0d1c1523902b9cdb08e404129677bfcPatch
- https://git.kernel.org/stable/c/52917e265aa5f848212f60fc50fc504d8ef12866Patch
- https://git.kernel.org/stable/c/6167af934f956d3ae1e06d61f45cd0d1004bbe1aPatch
- https://git.kernel.org/stable/c/a0321e6e58facb39fe191caa0e52ed9aab6a48fePatch
- https://git.kernel.org/stable/c/f1e91bd4efeae48b0f42caed7e8ce2e3a0d05b02Patch
FAQ
What is CVE-2026-23236?
CVE-2026-23236 is a vulnerability with a CVSS score of 7.3 (HIGH). In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from users...
How severe is CVE-2026-23236?
CVE-2026-23236 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-23236?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.