PT-2026-22918 · Linux+1 · Linux Kernel+1

Published 2026-03-04 · Updated 2026-03-18 · CVE-2026-23232

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to a reverted commit intended to address a deadlock issue. The original patch introduced a potential deadlock scenario involving write operations, remounting, and checkpointing within the f2fs filesystem. Specifically, the deadlock occurs due to the acquisition of locks in a conflicting order: lock A (obtained through lock page) and lock B (obtained through down write(cp enable rwsem)). The reverted commit aims to resolve this deadlock by removing the problematic changes. The functions involved in the deadlock include f2fs enable checkpoint, sync inode sb, and writepages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-23232

OPENSUSE-SU-2026:10387-1

Affected Products

Linux Kernel

F2Fs

References · 42

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23232.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23232 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10387-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23232 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-23232 · Security Note
• https://ubuntu.com/security/CVE-2026-23232 · Vendor Advisory
• https://git.kernel.org/stable/c/b6382273801bc7c778545dd8004c9a9d750b4f62 · Patch
• https://git.kernel.org/stable/c/3996b70209f145bfcf2afc7d05dd92c27b233b48 · Patch
• https://osv.dev/vulnerability/CVE-2026-23232 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://suse.com/security/cve/CVE-2026-23233 · Note
• https://suse.com/security/cve/CVE-2025-71235 · Note
• https://suse.com/security/cve/CVE-2026-23231 · Note
• https://suse.com/security/cve/CVE-2026-23223 · Note
• https://suse.com/security/cve/CVE-2025-71230 · Note