PT-2026-20429 · Linux+1 · Linux Kernel+1

Published 2026-01-01 · Updated 2026-05-26 · CVE-2026-23217

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock situation can occur in the Linux kernel related to tracing and System Call Interface (SBI) Extended Call (ECALL) functionality on RISC-V systems. Specifically, if functions within the sbi ecall.c file are traceable, triggering a snapshot of the ring buffer via sbi ecall can lead to a recursive loop of SBI ECALLs and snapshots, resulting in a deadlock. This is more easily triggered on RISC-V systems lacking the SSTC extension, as timer events in timer-riscv.c periodically issue SBI ECALLs. The issue arises when sbi ecall triggers a snapshot of the ringbuffer, which in turn raises an interrupt, leading to another call to sbi ecall and another snapshot, creating an endless loop. The sbi ecall function is the entry point for system calls.

Recommendations Exclude the functions in the sbi ecall.c file from tracing to prevent the potential deadlock. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-23217

ECHO-DED4-18A7-38B1

Affected Products

Linux Kernel

Risc-V

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23217.json · Exploit
• https://git.kernel.org/stable/c/b1f8285bc8e3508c1fde23b5205f1270215d4984 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23217 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23217 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23217 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23217 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23217 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23217 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23217 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-23217 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-23217 · Vendor Advisory
• https://git.kernel.org/stable/c/b0d7f5f0c9f05f1b6d4ee7110f15bef9c11f9df0 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23217 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2026-23217 · Vendor Advisory
• https://t.me/CVEtracker/44987 · Telegram Post