CVE-2026-23177 — Infinite Loop in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 14
Description
In the Linux kernel, the following vulnerability has been resolved:
mm, shmem: prevent infinite loop on truncate race
When truncating a large swap entry, shmem_free_swap() returns 0 when the
entry's index doesn't match the given index due to lookup alignment. The
failure fallback path checks if the entry crosses the end border and
aborts when it happens, so truncate won't erase an unexpected entry or
range. But one scenario was ignored.
When `index` points to the middle of a large swap entry,…
Affected Packages4 packages
▶CVEListV5linux/linux809bc86517cc408b5b8cb8e08e69096639432bc8 — dfc3ab6bd64860f8022d69903be299d09be86e11+3
🔴Vulnerability Details
3GHSA▶
GHSA-xwq7-47qj-qwwf: In the Linux kernel, the following vulnerability has been resolved:
mm, shmem: prevent infinite loop on truncate race
When truncating a large swap e↗2026-02-14
OSV▶
CVE-2026-23177: In the Linux kernel, the following vulnerability has been resolved: mm, shmem: prevent infinite loop on truncate race When truncating a large swap ent↗2026-02-14