CVE-2026-23357 — Deadlock in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 90.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
can: mcp251x: fix deadlock in error path of mcp251x_open
The mcp251x_open() function call free_irq() in its error path with the
mpc_lock mutex held. But if an interrupt already occurred the
interrupt handler will be waiting for the mpc_lock and free_irq() will
deadlock waiting for the handler to finish.
This issue is similar to the one fixed in commit 7dd9c26bd6cf ("can:
mcp251x: fix deadlock if an interrupt occurs during mcp…
Affected Packages5 packages
▶CVEListV5linux/linuxbf66f3736a945dd4e92d86427276c6eeab0a6c1d — 256f0cff6e946c570392bda1d01a65e789a7afd0+6
🔴Vulnerability Details
3OSV▶
CVE-2026-23357: In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock in error path of mcp251x_open The mcp251x_open() functi↗2026-03-25
GHSA▶
GHSA-f94p-fcww-cpfj: In the Linux kernel, the following vulnerability has been resolved:
can: mcp251x: fix deadlock in error path of mcp251x_open
The mcp251x_open() func↗2026-03-25