PT-2026-8187 · Linux+1 · Linux Kernel+1

Published

2026-01-01

·

Updated

2026-05-22

·

CVE-2026-23179

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's nvmet-tcp component where a hang can occur within the nvmet tcp listen data ready() function. This issue arises when a socket is closed while in the TCP LISTEN state, triggering a callback to flush outstanding packets. This callback then invokes nvmet tcp listen data ready() while holding the sk callback lock, potentially leading to a deadlock if not handled correctly. The problem stems from attempting to acquire the sk callback lock without first checking if the socket is in the TCP LISTEN state.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23179
ECHO-56D9-D586-5705
OESA-2026-1566
OESA-2026-1567
OESA-2026-1570
OPENSUSE-SU-2026:20416-1
SUSE-SU-2026:0962-1
SUSE-SU-2026:1081-1
SUSE-SU-2026:20667-1
SUSE-SU-2026:20720-1
SUSE-SU-2026:20838-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
SUSE-SU-2026:20931-1
SUSE-SU-2026:21284-1
USN-8278-1
USN-8289-1
USN-8296-1

Affected Products

Linux Kernel
Ubuntu