CVE-2026-23419 — Deadlock in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 3
Description
In the Linux kernel, the following vulnerability has been resolved:
net/rds: Fix circular locking dependency in rds_tcp_tune
syzbot reported a circular locking dependency in rds_tcp_tune() where
sk_net_refcnt_upgrade() is called while holding the socket lock:
WARNING: possible circular locking dependency detected
kworker/u10:8/15040 is trying to acquire lock:
ffffffff8e9aaf80 (fs_reclaim){+.+.}-{0:0},
at: __kmalloc_cache_noprof+0x4b/0x6f0
but task is already holding lock:
ffff88805a3c1ce0 (k…
Affected Packages3 packages
▶CVEListV5linux/linux3a58f13a881ed351198ffab4cf9953cf19d2ab3a — 8babb271403378ba6836f6c8599c5313d0e2355d+6
🔴Vulnerability Details
2GHSA▶
GHSA-x244-gjj6-jc73: In the Linux kernel, the following vulnerability has been resolved:
net/rds: Fix circular locking dependency in rds_tcp_tune
syzbot reported a circu↗2026-04-03
OSV▶
CVE-2026-23419: In the Linux kernel, the following vulnerability has been resolved: net/rds: Fix circular locking dependency in rds_tcp_tune syzbot reported a circula↗2026-04-03