{
  "cveId": "CVE-2026-23183",
  "url": "https://patchblox.com/security/cve/CVE-2026-23183",
  "summary": "CVE-2026-23183 is fixed in linux on 1 platform by DEBIAN-CVE-2026-23183 (version 6.18.10-1), released February 14, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cgroup/dmem: fix NULL pointer dereference when s...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  cgroup/dmem: fix NULL pointer dereference when setting max  An issue was triggered:   BUG: kernel NULL pointer dereference, address: 0000000000000000  #PF: supervisor read access in kernel mode  #PF: error_code(0x0000) - not-present page  PGD 0 P4D 0  Oops: Oops: 0000 [#1] SMP NOPTI  CPU: 15 UID: 0 PID: 658 Comm: bash Tainted: 6.19.0-rc6-next-2026012  Tainted: [O]=OOT_MODULE  Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996),  RIP: 0010:strcmp\u002B0x10/0x30  RSP: 0018:ffffc900017f7dc0 EFLAGS: 00000246  RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888107cd4358  RDX: 0000000019f73907 RSI: ffffffff82cc381a RDI: 0000000000000000  RBP: ffff8881016bef0d R08: 000000006c0e7145 R09: 0000000056c0e714  R10: 0000000000000001 R11: ffff888107cd4358 R12: 0007ffffffffffff  R13: ffff888101399200 R14: ffff888100fcb360 R15: 0007ffffffffffff  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  CR2: 0000000000000000 CR3: 0000000105c79000 CR4: 00000000000006f0  Call Trace:   \u003CTASK\u003E   dmemcg_limit_write.constprop.0\u002B0x16d/0x390   ? __pfx_set_resource_max\u002B0x10/0x10   kernfs_fop_write_iter\u002B0x14e/0x200   vfs_write\u002B0x367/0x510   ksys_write\u002B0x66/0xe0   do_syscall_64\u002B0x6b/0x390   entry_SYSCALL_64_after_hwframe\u002B0x76/0x7e  RIP: 0033:0x7f42697e1887  It was trriggered setting max without limitation, the command is like: \u0022echo test/region0 \u003E dmem.max\u0022. To fix this issue, add check whether options is valid after parsing the region_name.",
  "published": "2026-02-14T17:15:56Z",
  "severity": "",
  "epss": 0.00181,
  "epssPercentile": 0.07685,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.18.10-1",
      "fix": "DEBIAN-CVE-2026-23183",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-23183",
      "released": "2026-02-14T17:15:56Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}