PT-2026-30033 · Linux · Linux Kernel

Syzbot · Published 2026-04-03 · Updated 2026-04-20 · CVE-2026-23419

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a circular locking dependency within the rds tcp tune() function. The sk net refcnt upgrade() function is called while holding the socket lock, leading to a circular dependency with fs reclaim() due to memory allocation performed during the socket lock's critical section. This issue was reported by syzbot. The fix involves moving the sk net refcnt upgrade() call outside the socket lock critical section, as the modified fields are not concurrently accessed at that point.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-23419

ECHO-58D1-25B9-926E

OPENSUSE-SU-2026:20572-1

SUSE-SU-2026:21114-1

SUSE-SU-2026:21123-1

SUSE-SU-2026:21237-1

SUSE-SU-2026:21255-1

Affected Products

Linux Kernel

References · 205

• https://git.kernel.org/stable/c/026bbaeeab9e04534ee58882b6447300629b42f6 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23419 · Vendor Advisory
• https://git.kernel.org/stable/c/6ce948fa54599f369ff7fe8b793a6aae4b0762b2 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-23419 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23419 · Vendor Advisory
• https://git.kernel.org/stable/c/8519e6883a942e510f33a0e634e27bcc3a844a40 · Patch
• https://git.kernel.org/stable/c/8babb271403378ba6836f6c8599c5313d0e2355d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:21237-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21114-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6a877ececd6daa002a9a0002cd0fbca6592a9244 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:20572-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:21123-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23419 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23419 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-23419 · Security Note