PT-2026-8163 · Linux+2 · Linux Kernel+2
Bernd
·
Published
2026-01-01
·
Updated
2026-06-16
·
CVE-2026-23168
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the flexible proportions code. A lockdep splat can occur due to a race condition within the
fprop new period() function. Specifically, the issue arises when a timer fires within softirq context, calling writeout period which then invokes fprop new period(). Simultaneously, a hardirq can be raised, leading to an indefinite loop when reading the sequence counter due to an odd sequence value. This condition is more likely to occur with FUSE block device interfaces (bdis) that have configured a maximum fraction of writeout throughput. The vulnerability is related to the sequence counter write section not being irqsafe.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu