PT-2026-8129 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-02-14 · CVE-2026-23134

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where the kmalloc nolock() function lacks a sufficient context check for PREEMPT RT kernels. Specifically, on PREEMPT RT kernels, local lock can become a sleeping lock, and the existing check in kmalloc nolock() only verifies the absence of NMIs or hard IRQ contexts, failing to account for scenarios where preemption is disabled. This can lead to a kernel bug—a sleeping function being called from an invalid context—when a BPF program runs from a tracepoint with preemption disabled. The fix involves adding a check for !preemptible() on PREEMPT RT kernels to prevent acquiring a sleeping lock when preemption is disabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23134

Affected Products

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23134.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23134 · Vendor Advisory
• https://git.kernel.org/stable/c/f60ba4a97ae3f94e4818722ed2e4d260bbb17b44 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23134 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23134 · Vendor Advisory
• https://git.kernel.org/stable/c/99a3e3a1cfc93b8fe318c0a3a5cfb01f1d4ad53c · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23134 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23134 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23134 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23134 · Security Note
• https://twitter.com/CVEnew/status/2022702087776424043 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/99a3e3a1cfc93b8fe318c0a3a5cfb01f1d4ad53c · Note
• https://t.me/cveNotify/152043 · Telegram Post