CVE-2026-23356 — Improper Resource Locking in Linux
Severity
6.3MEDIUM
No vectorEPSS
0.0%
top 90.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
Even though we check that we "should" be able to do lc_get_cumulative()
while holding the device->al_lock spinlock, it may still fail,
if some other code path decided to do lc_try_lock() with bad timing.
If that happened, we logged "LOGIC BUG for enr=...",
but still did not return an error.
The rest of the code now assumed that this request has references
for the relevant …
Affected Packages3 packages
▶CVEListV5linux/linux08a1ddab6df7d3c7b6341774cb1cf4b21b96a214 — 7752569fc78e89794ce28946529850282233f99d+6
🔴Vulnerability Details
4OSV▶
CVE-2026-23356: In the Linux kernel, the following vulnerability has been resolved: drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Even though we check that we↗2026-03-25
GHSA▶
GHSA-rp6p-x9w7-2rqg: In the Linux kernel, the following vulnerability has been resolved:
drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock()
Even though we check that w↗2026-03-25