CVE-2026-23324Disclosure(linux / linux_kernel)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch linux linux_kernel systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: can: usb: etas_es58x: correctly anchor the urb in the read bulk callback When submitting an urb, that is using the anchor pattern, it needs to be anchored before submitting it otherwise it could be leaked if usb_kill_anchored_urbs() is called. This logic is correctly done elsewhere in the driver, except in the read bulk callback so do that here also.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 3d ago at 1 mentions (2026-03-25); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
Products
linux_kernel

2 versions affected across 1 product

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-03-25: 1Mentions · 2026-03-26: 1Mentions · 2026-03-28: 1Mentions · 2026-03-29: 1Patch / Workaround · 2026-03-25: 1Technical Details · 2026-03-25: 1Technical Details · 2026-03-26: 1Technical Details · 2026-03-29: 103-2503-2603-2803-29
Signal classification2 categories
Disclosure
375.0%
Patch
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-03-251
Patch1
2026-03-261
Disclosure1
2026-03-281
Disclosure1
2026-03-291
Disclosure1
Full discourse4 posts
  • CVE@CVEnew
    Patch

    CVE-2026-23324 In the Linux kernel, the following vulnerability has been resolved: can: usb: etas_es58x: correctly anchor the urb in the read bulk callback When submitting an urb,… https://www.cve.org/CVERecord?id=CVE-2026-23324

    Post summary

    The Linux kernel CVE was fixed via a commit that correctly anchored the urb in the read bulk callback, with no evidence of PoC, exploit, or active exploitation.

    00010141
    56.8K followersView on X
  • Network Services Group@NSGHELP
    Disclosure

    Information published. https://www.netservicesgroup.com/msrc-blog-alerts/cve-2026-23324-can-usb-etas_es58x-correctly-anchor-the-urb-in-the-read-bulk-callback/

    Post summary

    A blog alert on CVE-2026-23324 is referenced, providing a brief technical description but no PoC, exploit code, patch, or evidence of active exploitation.

    000008
    44 followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-23324 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23324 #CVE-2026-23324 #CVE   #CyberSecurity #InfoSec https://t.co/9htP02QciT

    Post summary

    The tweet merely announces the existence of CVE-2026-23324 with minimal details, linking only to the NVD page, and does not provide any technical, exploit, or mitigation information.

    0000024
    123 followersView on X
  • WindowsForum@windowsforum
    Disclosure

    🕳️ USB lifecycle bugs: the kind that won’t get you RCE, but will totally wreck your day. If URBs aren’t anchored before submit, teardown can’t reliably kill them—classic “small” fix, big mess. https://windowsforum.com/threads/cve-2026-23324-usb-kernel-bug-anchor-urbs-before-submit-etas_es58x.407389/ #LinuxKernelSecurity #UsbUrbLifecycle #CanUsbDriver https://t.co/gstACXPXMf

    Post summary

    The post announces CVE-2026-23324, detailing how unanchored URBs disrupt USB kernel teardown, without mentioning PoC, exploitation tools, or active attacks.

    0000025
    1.0K followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
OSlinuxlinux_kernel---
OSlinuxlinux_kernel5.13--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--
OSlinuxlinux_kernel7.0--

Explore more