CVE-2026-23229: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well.

Засегнати продукти

• Linux Linux: 0eb69890e86775d178452880ea0d24384c5ccedf преди 552475d0b6cece73a52c0fa5faa0ce45e99df74b; 75cba72ddb788a5b9c7ed2139fbb84383df029eb преди 8ee8ccfd60bf17cbdab91069d324b5302f4f3a30; ae4747dab2eab95a68bb2f6c7e904bff0424e1b1 преди c9e594194795c86ca753ad6ed64c2762e9309d0d; c4c54fce9ec54a59a4ca035af13c2823c76684cc преди d6f0d586808689963e58fd739bed626ff5013b24; fed93fb62e05c38152b0fc1dc9609639e63eed76 преди c0a0ded3bb7fd45f720faa48449a930153257d3a; fed93fb62e05c38152b0fc1dc9609639e63eed76 преди e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2; fed93fb62e05c38152b0fc1dc9609639e63eed76 преди 49c57c6c108931a914ed94e3c0ddb974008260a3; fed93fb62e05c38152b0fc1dc9609639e63eed76 преди b505047ffc8057555900d2d3a005d033e6967382; 96be18c8fff9d57e29621386e2fa17268383ea27; 830a4f073f7edd2cc4f30ba95bdc3495d97c2550; 8862c0d2e47ba1733d9687fe0ff4e02d6e391255; 5.10.209 преди 5.10.251; 5.15.148 преди 5.15.201; 6.1.75 преди 6.1.164; 6.6.14 преди 6.6.125; 4.19.306 преди 4.20; 5.4.268 преди 5.5; 6.7.2 преди 6.8
• Linux Linux: 6.8; преди 6.8; 5.10.251 до 5.10.*; 5.15.201 до 5.15.*; 6.1.164 до 6.1.*; 6.6.125 до 6.6.*; 6.12.72 до 6.12.*; 6.18.11 до 6.18.*; 6.19.1 до 6.19.*; от 7.0 нататък
• Siemens RUGGEDCOM RST2428P: преди V4.0

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23229
• https://nvd.nist.gov/vuln/detail/CVE-2026-23229
• https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b
• https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30
• https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d
• https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24
• https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a
• https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2
• https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3
• https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382
• https://cert-portal.siemens.com/productcert/html/ssa-253495.html