Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-23236— fbdev: smscufx: properly copy ioctl memory to kernelspace

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于UFX_IOCTL_REPORT_DAMAGE ioctl未正确复制内存，可能导致内核空间访问无效数据。

CVSS 7.3 · High EPSS 0.21% · P10

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 3c8a63e22a0802fd56380f6ab305b419f18eb6f5< 061cfeb560aa3ddc174153dbe5be9d0b55eb7248 affected
3c8a63e22a0802fd56380f6ab305b419f18eb6f5< 6167af934f956d3ae1e06d61f45cd0d1004bbe1a affected
3c8a63e22a0802fd56380f6ab305b419f18eb6f5< a0321e6e58facb39fe191caa0e52ed9aab6a48fe affected
3c8a63e22a0802fd56380f6ab305b419f18eb6f5< 0634e8d650993602fc5b389ff7ac525f6542e141 affected
3c8a63e22a0802fd56380f6ab305b419f18eb6f5< 52917e265aa5f848212f60fc50fc504d8ef12866 affected
3c8a63e22a0802fd56380f6ab305b419f18eb6f5< 1c008ad0f0d1c1523902b9cdb08e404129677bfc affected
3c8a63e22a0802fd56380f6ab305b419f18eb6f5< f1e91bd4efeae48b0f42caed7e8ce2e3a0d05b02 affected
3c8a63e22a0802fd56380f6ab305b419f18eb6f5< 120adae7b42faa641179270c067864544a50ab69 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-23236

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
fbdev: smscufx: properly copy ioctl memory to kernelspace
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: properly copy ioctl memory to kernelspace The UFX_IOCTL_REPORT_DAMAGE ioctl does not properly copy data from userspace to kernelspace, and instead directly references the memory, which can cause problems if invalid data is passed from userspace. Fix this all up by correctly copying the memory before accessing it within the kernel.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于UFX_IOCTL_REPORT_DAMAGE ioctl未正确复制内存，可能导致内核空间访问无效数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 3c8a63e22a0802fd56380f6ab305b419f18eb6f5 ~ 061cfeb560aa3ddc174153dbe5be9d0b55eb7248 -
Linux Linux 3.2 -

II. Public POCs for CVE-2026-23236

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-23236

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-23236 (8)

Same Patch Batch · Linux · 2026-03-04 · 9 CVEs total

CVE-2026-23231 7.8 HIGH netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
CVE-2026-23232 Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()"
CVE-2025-71238 scsi: qla2xxx: Fix bsg_done() causing double free
CVE-2026-23233 f2fs: fix to avoid mapping wrong physical block for swapfile
CVE-2026-23234 f2fs: fix to avoid UAF in f2fs_write_end_io()
CVE-2026-23235 f2fs: fix out-of-bounds access in sysfs attribute read/write
CVE-2026-23238 romfs: check sb_set_blocksize() return value
CVE-2026-23237 platform/x86: classmate-laptop: Add missing NULL pointer checks

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-23236

No comments yet

Leave a comment