Search/CVE-2026-23168
● CVE — Medium

CVE-2026-23168

VendorlinuxProductlinux kernelDiscoveredFeb 14, 2026UpdatedMar 18, 2026

In the Linux kernel, the following vulnerability has been resolved: flex_proportions: make fprop_new_period() hardirq safe Bernd has reported a lockdep splat from flexible proportions code that is essentially complaining about the following race: run_timer_softirq - we are in softirq context call_timer_fn writeout_period fprop_new_period write_seqcount_begin(&p->sequence); ... blk_mq_end_request() blk_update_request() ext4_end_bio() folio_end_writeback() __wb_writeout_add() __fprop_add_percpu_max() if (unlikely(max_frac sequence); - sees odd sequence so loops indefinitely Note that a deadlock like this is only possible if the bdi has configured maximum fraction of writeout throughput which is very rare in general but frequent for example for FUSE bdis. To fix this problem we have to make…

CVSS v3.1
5.5 MEDIUM
EPSS
0.13%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
12
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.02pp
0.11% → 0.13% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Connections
13 relationships
Timeline
disclosure → media coverage
Feb 14, 2026
Disclosure — published as a CVE record. · last revised by NVD Mar 18, 2026
May 19, 2026
ubuntu.com reports: USN-8278-1: Linux kernel vulnerabilities
May 20, 2026
ubuntu.com reports: USN-8289-1: Linux kernel (NVIDIA) vulnerabilities
May 22, 2026
ubuntu.com reports: USN-8296-1: Linux kernel (FIPS) vulnerabilities
May 25, 2026
ubuntu.com reports: USN-8296-2: Linux kernel (NVIDIA Tegra) vulnerabilities
May 26, 2026
ubuntu.com reports: USN-8278-2: Linux kernel (Azure) vulnerabilities
Jul 2, 2026
ubuntu.com reports: USN-8499-1: Linux kernel (Xilinx) vulnerabilities
Jul 20, 2026
ubuntu.com reports: USN-8570-1: Linux kernel vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8594-1: Linux kernel (OEM) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8604-1: Linux kernel (Azure) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8605-1: Linux kernel (Azure CVM) vulnerabilities
Jul 28, 2026
ubuntu.com reports: USN-8570-2: Linux kernel (Oracle) vulnerabilities
Aug 21, 2026
ubuntu.com reports: USN-8669-1: Linux kernel (NVIDIA) vulnerabilities