Log in Start free

Vulnerability · Published Mar 4, 2026 · Assigned by Linux

CVE-2026-23236fbdev: smscufx: properly copy ioctl memory to kernelspace

High 7.3

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.2%top 86.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from userspace to kernelspace, and instead directly references the memory, which can cause problems if invalid data is passed from userspace. Fix this all up by correctly copying the memory before accessing it within the kernel.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.164-1DEBIAN-CVE-2026-23236
Debian:12linux6.1.164-1DSA-6163-1
Debian:13linux6.12.74-2DEBIAN-CVE-2026-23236
Debian:13linux6.12.74-2DSA-6162-1
Debian:14linux6.18.13-1DEBIAN-CVE-2026-23236
Ubuntu:22.04:LTSlinux5.15.0-186.196UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux6.8.0-134.134UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux6.8.0-134.134USN-8492-1
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-aws5.15.0-1112.119UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-aws6.8.0-1060.63UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-aws6.8.0-1060.63USN-8492-1
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1060.63~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1060.63~22.04.1USN-8492-2
Ubuntu:22.04:LTSlinux-azure5.15.0-1117.126UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-azure6.8.0-1063.71UBUNTU-CVE-2026-23236
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1063.71~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1117.126UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1062.69UBUNTU-CVE-2026-23236
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1062.69~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-gcp5.15.0-1112.122UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-gcp6.8.0-1063.69USN-8492-1
Ubuntu:24.04:LTSlinux-gcp6.8.0-1063.69UBUNTU-CVE-2026-23236
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1063.69~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1063.69~22.04.1USN-8492-2
Ubuntu:22.04:LTSlinux-gke5.15.0-1108.114UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-gke6.8.0-1058.64USN-8492-2
Ubuntu:24.04:LTSlinux-gke6.8.0-1058.64UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1095.103UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1045.48UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1045.48USN-8492-2
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-136.136~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-ibm5.15.0-1106.110UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-ibm6.8.0-1060.61USN-8492-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1060.61UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1060.61~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1060.61~22.04.1USN-8492-2
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1107.113UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-kvm5.15.0-1104.109UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-184.194UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-134.134.1USN-8497-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-134.134.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-134.134.1~22.04.1USN-8497-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-134.134.1~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1107.108UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1058.61USN-8492-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1058.61UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1058.61~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1058.61~22.04.1USN-8492-1
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1058.61.1UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1058.61.1USN-8492-2
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1064.66UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1029.30USN-8498-1
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1029.30UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1053.53UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-oracle5.15.0-1109.115UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-oracle6.8.0-1057.58USN-8492-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1057.58UBUNTU-CVE-2026-23236
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1057.58~22.04.1USN-8492-2
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1057.58~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-raspi5.15.0-1106.109UBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-raspi6.8.0-1060.64USN-8492-4
Ubuntu:24.04:LTSlinux-raspi6.8.0-1060.64UBUNTU-CVE-2026-23236
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-23236
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-23236
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-134.134~22.04.1UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-23236
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33UBUNTU-CVE-2026-23236
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1075.79UBUNTU-CVE-2026-23236

Affected products (as reported)

VendorProductVersions
Linux Linux 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before 061cfeb560aa3ddc174153dbe5be9d0b55eb72483c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before 6167af934f956d3ae1e06d61f45cd0d1004bbe1a3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before a0321e6e58facb39fe191caa0e52ed9aab6a48fe3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before 0634e8d650993602fc5b389ff7ac525f6542e1413c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before 52917e265aa5f848212f60fc50fc504d8ef128663c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before 1c008ad0f0d1c1523902b9cdb08e404129677bfc3c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before f1e91bd4efeae48b0f42caed7e8ce2e3a0d05b023c8a63e22a0802fd56380f6ab305b419f18eb6f5 – before 120adae7b42faa641179270c067864544a50ab69
Linux Linux 3.2

References