Log in Start free

Vulnerability · Published Feb 4, 2026 · Assigned by Linux

CVE-2026-23090slimbus: core: fix device reference leak on report present

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.1%top 96.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: slimbus: core: fix device reference leak on report present Slimbus devices can be allocated dynamically upon reception of report-present messages. Make sure to drop the reference taken when looking up already registered devices. Note that this requires taking an extra reference in case the device has not yet been registered and has to be allocated.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.162-1DEBIAN-CVE-2026-23090
Debian:13linux6.12.69-1DEBIAN-CVE-2026-23090
Debian:14linux6.18.8-1DEBIAN-CVE-2026-23090
Ubuntu:22.04:LTSlinux5.15.0-176.186UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux6.8.0-117.117UBUNTU-CVE-2026-23090
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-aws5.15.0-1105.112UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-aws6.8.0-1055.58UBUNTU-CVE-2026-23090
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1057.60~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-azure5.15.0-1110.119UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-azure6.8.0-1056.62UBUNTU-CVE-2026-23090
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-azure-6.176.17.0-1021.21~24.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1059.65~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1114.123UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2026-23090
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-gcp5.15.0-1105.114UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-gcp6.8.0-1058.61UBUNTU-CVE-2026-23090
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1021.24~24.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1060.63~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-gke5.15.0-1101.107UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-gke6.8.0-1054.60UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1088.96UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1041.44UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-hwe-6.176.17.0-41.41~24.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-124.124~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-ibm5.15.0-1099.102UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-ibm6.8.0-1055.56UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1055.56~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1100.106UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-kvm5.15.0-1097.102UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-175.185UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-117.117.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-117.117.1~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1100.101UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1054.57UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1031.31UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1054.57~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1054.57.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1057.57UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1024.24UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1046.46UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1030.30UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-oracle5.15.0-1102.108UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-oracle6.8.0-1054.55UBUNTU-CVE-2026-23090
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1019.19~24.04.3UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1054.55~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-raspi5.15.0-1099.102UBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-raspi6.8.0-1056.60UBUNTU-CVE-2026-23090
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23090
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23090
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-117.117~22.04.1UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-23090
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33UBUNTU-CVE-2026-23090
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1070.74UBUNTU-CVE-2026-23090

Affected products (as reported)

VendorProductVersions
Linux Linux 46a2bb5a7f7ea2728be50f8f5b29a20267f700fe – before b1217e40705b2f6d311c197b12866752656217ff46a2bb5a7f7ea2728be50f8f5b29a20267f700fe – before 948615429c9f2ac9d25d4e1f1a4472926b217a9a46a2bb5a7f7ea2728be50f8f5b29a20267f700fe – before 02b78bbfbafe49832e508079148cb87cdfa5582546a2bb5a7f7ea2728be50f8f5b29a20267f700fe – before 2ddc09f6a0a221b1d91a7cbc8cc2cefdbd334fe646a2bb5a7f7ea2728be50f8f5b29a20267f700fe – before 54de72a7aabc0749938d7a2833a0c1a5d3ed7ac946a2bb5a7f7ea2728be50f8f5b29a20267f700fe – before 6602bb4d1338e92b5838e50322b87697bdbd2ee046a2bb5a7f7ea2728be50f8f5b29a20267f700fe – before 9391380eb91ea5ac792aae9273535c8da5b9aa01
Linux Linux 4.16

References