CVE-2026-23374 — Missing Synchronization in Linux
Severity
8.4HIGH
No vectorEPSS
0.0%
top 94.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
blktrace: fix __this_cpu_read/write in preemptible context
tracing_record_cmdline() internally uses __this_cpu_read() and
__this_cpu_write() on the per-CPU variable trace_cmdline_save, and
trace_save_cmdline() explicitly asserts preemption is disabled via
lockdep_assert_preemption_disabled(). These operations are only safe
when preemption is off, as they were designed to be called from the
scheduler context (probe_wakeup_sched…
Affected Packages5 packages
▶CVEListV5linux/linux7ffbd48d5cab22bcd1120eb2349db1319e2d827a — 59efa088752b1c380a0475974679850cc8aef907+2
🔴Vulnerability Details
3OSV▶
CVE-2026-23374: In the Linux kernel, the following vulnerability has been resolved: blktrace: fix __this_cpu_read/write in preemptible context tracing_record_cmdline(↗2026-03-25
GHSA▶
GHSA-w776-5fwp-835q: In the Linux kernel, the following vulnerability has been resolved:
blktrace: fix __this_cpu_read/write in preemptible context
tracing_record_cmdlin↗2026-03-25