Is CVE-2026-23211 in the CISA KEV catalog?

No. CVE-2026-23211 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2026-23211?

CVE-2026-23211 has a CVSS v3 base score of 5.5 (MEDIUM).

What is the EPSS score for CVE-2026-23211?

CVE-2026-23211 has an EPSS score of 0.10% (1th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2026-23211?

Upgrade linux on debian unstable to 6.18.9-1 or later.

CVE & CISA-KEV Catalog

CVE-2026-23211

MEDIUM

5.5

CVSS v3

NVD

Description

In the Linux kernel, the following vulnerability has been resolved: mm, swap: restore swap_space attr aviod kernel panic commit 8b47299a411a ("mm, swap: mark swap address space ro and add context debug check") made the swap address space read-only. It may lead to kernel panic if arch_prepare_to_swap returns a failure under heavy memory pressure as follows, el1_abort+0x40/0x64 el1h_64_sync_handler+0x48/0xcc el1h_64_sync+0x84/0x88 errseq_set+0x4c/0xb8 (P) __filemap_set_wb_err+0x20/0xd0 shrink_folio_list+0xc20/0x11cc evict_folios+0x1520/0x1be4 try_to_shrink_lruvec+0x27c/0x3dc shrink_one+0x9c/0x228 shrink_node+0xb3c/0xeac do_try_to_free_pages+0x170/0x4f0 try_to_free_pages+0x334/0x534 __alloc_pages_direct_reclaim+0x90/0x158 __alloc_pages_slowpath+0x334/0x588 __alloc_frozen_pages_noprof+0x224/0x2fc __folio_alloc_noprof+0x14/0x64 vma_alloc_zeroed_movable_folio+0x34/0x44 do_pte_missing+0xad4/0x1040 handle_mm_fault+0x4a4/0x790 do_page_fault+0x288/0x5f8 do_translation_fault+0x38/0x54 do_mem_abort+0x54/0xa8 Restore swap address space as not ro to avoid the panic.

How to fix

Remediation Available

linuxDebian

Fixed in:6.18.9-1CVE-2026-23211

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

0.10%probability of exploitation in 30 days

1stpercentile

Low risk: more likely to be exploited than 1% of all known CVEs.

References

Patch2

Embed a live status badge for CVE-2026-23211

Markdown

[![CVE-2026-23211](https://tridentstack.com/cve/badge/CVE-2026-23211.svg)](https://tridentstack.com/cve/CVE-2026-23211)

HTML

<a href="https://tridentstack.com/cve/CVE-2026-23211"><img src="https://tridentstack.com/cve/badge/CVE-2026-23211.svg" alt="CVE-2026-23211"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-03-18.