Medium 5.5Published Feb 4, 2026

CVE-2026-23096uacce: fix cdev handling in the cleanup path

Updated under an hour ago (Oct 27, 2026, 6:00 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: uacce: fix cdev handling in the cleanup path When cdev_device_add fails, it internally releases the cdev memory, and if cdev_device_del is then executed, it will cause a hang error. To fix it, we check the return value of cdev_device_add() and clear uacce->cdev to avoid calling cdev_device_del in the uacce_remove.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 015d239ac0142ad0e26567fd890ef8d171f13709 before c94c7188d325bc5137d447d67a2f18f7d4f2f4a3; 015d239ac0142ad0e26567fd890ef8d171f13709 builds before 1bc3e51367c420e6db31f41efa874c7a8e12194a; from 015d239ac0142ad0e26567fd890ef8d171f13709 before 819d647406200d0e83e56fd2df8f451b11290559; from 015d239ac0142ad0e26567fd890ef8d171f13709 before d9031575a2f8aabc53af3025dd79af313a2e046b; from 015d239ac0142ad0e26567fd890ef8d171f13709 before 98d67a1bd6caddd0a8b8c82a0b925742cf500936; from 015d239ac0142ad0e26567fd890ef8d171f13709 before bd2393ed7712513e7e2dbcb6e21464a67ff9e702; from 015d239ac0142ad0e26567fd890ef8d171f13709 before a3bece3678f6c88db1f44c602b2a63e84b4040ac	CNA record
linux linux_kernel linux:linux_kernel	from 5.7 before 5.10.249; from 5.11 before 5.15.199; from 5.16 before 6.1.162; from 6.2 before 6.6.122; from 6.7 before 6.12.68; from 6.13 before 6.18.8; 6.19; 6.19; and 4 more ranges	NVD

References

References

https://git.kernel.org/stable/c/c94c7188d325bc5137d447d67a2f18f7d4f2f4a3	patch
https://git.kernel.org/stable/c/1bc3e51367c420e6db31f41efa874c7a8e12194a	patch
https://git.kernel.org/stable/c/819d647406200d0e83e56fd2df8f451b11290559	patch
https://git.kernel.org/stable/c/d9031575a2f8aabc53af3025dd79af313a2e046b	patch
https://git.kernel.org/stable/c/98d67a1bd6caddd0a8b8c82a0b925742cf500936	patch
https://git.kernel.org/stable/c/bd2393ed7712513e7e2dbcb6e21464a67ff9e702	patch
https://git.kernel.org/stable/c/a3bece3678f6c88db1f44c602b2a63e84b4040ac	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.