The vulnerability of the `update_eth regs async()` function in the `drivers/net/usb/pegasus.c` file of the Linux kernel’s network adapter driver module allows a hacker to cause a service failure.

🗓️ 27 Mar 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The update_eth_regs_async() vulnerability in drivers/net/usb/pegasus.c allows service interruptions due to improper memory release.

Reporter	Title	Published	Views	Family All 146
ATTACKERKB	CVE-2026-23021	31 Jan 202611:39	–	attackerkb
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-113 (ALASKERNEL-5.10-2026-113)	19 Feb 202600:00	–	nessus
Tenable Nessus	Debian dla-4475 : ata-modules-5.10.0-35-armmp-di - security update	11 Feb 202600:00	–	nessus
Tenable Nessus	Debian dla-4476 : linux-config-6.1 - security update	11 Feb 202600:00	–	nessus
Tenable Nessus	Debian dsa-6126 : ata-modules-6.12.31-armmp-di - security update	9 Feb 202600:00	–	nessus
Tenable Nessus	Debian dsa-6127 : affs-modules-6.1.0-37-4kc-malta-di - security update	9 Feb 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.1 : kernel (EulerOS-SA-2026-2077)	6 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2102)	6 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-2132)	6 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-2171)	6 Jun 202600:00	–	nessus

Vulners

Node

red_hat red_hat_enterprise_linuxMatch7

OR

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

OR

red_hat red_hat_enterprise_linuxMatch10

OR

canonical ubuntuMatch25.10

Source	Link
git	www.git.kernel.org/linus/afa27621a28af317523e0836dad430bec551eb54
cve	www.cve.org/CVERecord
git	www.git.kernel.org/stable/c/5397ea6d21c35a17707e201a60761bdee00bcc4e
git	www.git.kernel.org/stable/c/a40af9a2904a1ab8ce61866ebe2a894ef30754ba
git	www.git.kernel.org/stable/c/ac5d92d2826dec51e5d4c6854865bc5817277452
git	www.git.kernel.org/stable/c/93f18eaa190374e0f2d253e3b1a65cee19a7abe6
git	www.git.kernel.org/stable/c/471dfb97599eec74e0476046b3ef8e7037f27b34
git	www.git.kernel.org/stable/c/ce6eef731aba23a988decea1df3b08cf978f7b01
access	www.access.redhat.com/security/cve/cve-2026-23021
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-23021

03 Apr 2026 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 25.5

CVSS 35.7

EPSS0.00149

update_eth_regs_async pegasus driver improper memory release remote attacker service interruption