CVE-2026-23031

🗓️ 31 Jan 2026 11:42:09Reported by LinuxType

Fix URB memory leak by anchoring URBs to the parent submission anchor in the gs_usb_receive_bulk_callback().

Reporter	Title	Published	Views	Family All 113
ATTACKERKB	CVE-2026-23031	31 Jan 202611:42	–	attackerkb
CBLMariner	CVE-2026-23031 affecting package kernel for versions less than 6.6.126.1-1	10 Mar 202622:56	–	cbl_mariner
Circl	CVE-2026-23031	19 Mar 202600:00	–	circl
CNNVD	Linux Kernel Security Vulnerabilities	31 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-23031 can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak	31 Jan 202611:42	–	cvelist
Debian	[SECURITY] [DLA 4476-1] linux-6.1 security update	11 Feb 202612:48	–	debian
Debian	[SECURITY] [DSA 6126-1] linux security update	9 Feb 202618:21	–	debian
Debian	[SECURITY] [DSA 6127-1] linux security update	9 Feb 202619:19	–	debian
Debian CVE	CVE-2026-23031	31 Jan 202611:42	–	debiancve
Tenable Nessus	Debian dla-4476 : linux-config-6.1 - security update	11 Feb 202600:00	–	nessus

Vulners

CNA

Node

linux linux_kernelRange3.16–5.15.203

linux linux_kernelRange5.16.0–6.1.162

linux linux_kernelRange6.2.0–6.6.122

linux linux_kernelRange6.7.0–6.12.67

linux linux_kernelRange6.13.0–6.18.7

linux linux_kernelRange6.19.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/can/usb/gs_usb.c"
    ],
    "versions": [
      {
        "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
        "lessThan": "9c151898cc259a7784be60ba38664f42ede39b31",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
        "lessThan": "ec5ccc2af9e5b045671f3f604b57512feda8bcc5",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
        "lessThan": "f905bcfa971edb89e398c98957838d8c6381c0c7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
        "lessThan": "08624b7206ddb9148eeffc2384ebda2c47b6d1e9",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
        "lessThan": "9f669a38ca70839229b7ba0f851820850a2fe1f7",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
        "lessThan": "7352e1d5932a0e777e39fa4b619801191f57e603",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/can/usb/gs_usb.c"
    ],
    "versions": [
      {
        "version": "3.16",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "3.16",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.203",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.162",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.122",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.67",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.7",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.19",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/9c151898cc259a7784be60ba38664f42ede39b31
git	www.git.kernel.org/stable/c/08624b7206ddb9148eeffc2384ebda2c47b6d1e9
git	www.git.kernel.org/stable/c/7352e1d5932a0e777e39fa4b619801191f57e603
git	www.git.kernel.org/stable/c/ec5ccc2af9e5b045671f3f604b57512feda8bcc5
git	www.git.kernel.org/stable/c/f905bcfa971edb89e398c98957838d8c6381c0c7
git	www.git.kernel.org/stable/c/9f669a38ca70839229b7ba0f851820850a2fe1f7
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-253495.html

02 Jun 2026 14:16Current

5.8Medium risk

Vulners AI Score5.8

EPSS0.00018