CVE-2026-23229

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3	Patch
https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b	Patch
https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30	Patch
https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382	Patch
https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a	Patch
https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d	Patch
https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24	Patch
https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2	Patch
https://cert-portal.siemens.com/productcert/html/ssa-253495.html

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

No history.

Information

Published : 2026-02-18 16:22

Updated : 2026-06-17 10:21

NVD link : CVE-2026-23229

Mitre link : CVE-2026-23229

CVE.ORG link : CVE-2026-23229

JSON object : View

Products Affected

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2026-23229", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "0eb69890e86775d178452880ea0d24384c5ccedf", "lessThan": "552475d0b6cece73a52c0fa5faa0ce45e99df74b", "versionType": "git"}, {"status": "affected", "version": "75cba72ddb788a5b9c7ed2139fbb84383df029eb", "lessThan": "8ee8ccfd60bf17cbdab91069d324b5302f4f3a30", "versionType": "git"}, {"status": "affected", "version": "ae4747dab2eab95a68bb2f6c7e904bff0424e1b1", "lessThan": "c9e594194795c86ca753ad6ed64c2762e9309d0d", "versionType": "git"}, {"status": "affected", "version": "c4c54fce9ec54a59a4ca035af13c2823c76684cc", "lessThan": "d6f0d586808689963e58fd739bed626ff5013b24", "versionType": "git"}, {"status": "affected", "version": "fed93fb62e05c38152b0fc1dc9609639e63eed76", "lessThan": "c0a0ded3bb7fd45f720faa48449a930153257d3a", "versionType": "git"}, {"status": "affected", "version": "fed93fb62e05c38152b0fc1dc9609639e63eed76", "lessThan": "e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2", "versionType": "git"}, {"status": "affected", "version": "fed93fb62e05c38152b0fc1dc9609639e63eed76", "lessThan": "49c57c6c108931a914ed94e3c0ddb974008260a3", "versionType": "git"}, {"status": "affected", "version": "fed93fb62e05c38152b0fc1dc9609639e63eed76", "lessThan": "b505047ffc8057555900d2d3a005d033e6967382", "versionType": "git"}, {"status": "affected", "version": "96be18c8fff9d57e29621386e2fa17268383ea27", "versionType": "git"}, {"status": "affected", "version": "830a4f073f7edd2cc4f30ba95bdc3495d97c2550", "versionType": "git"}, {"status": "affected", "version": "8862c0d2e47ba1733d9687fe0ff4e02d6e391255", "versionType": "git"}, {"status": "affected", "version": "5.10.209", "lessThan": "5.10.251", "versionType": "semver"}, {"status": "affected", "version": "5.15.148", "lessThan": "5.15.201", "versionType": "semver"}, {"status": "affected", "version": "6.1.75", "lessThan": "6.1.164", "versionType": "semver"}, {"status": "affected", "version": "6.6.14", "lessThan": "6.6.125", "versionType": "semver"}, {"status": "affected", "version": "4.19.306", "lessThan": "4.20", "versionType": "semver"}, {"status": "affected", "version": "5.4.268", "lessThan": "5.5", "versionType": "semver"}, {"status": "affected", "version": "6.7.2", "lessThan": "6.8", "versionType": "semver"}], "programFiles": ["drivers/crypto/virtio/virtio_crypto_core.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.8"}, {"status": "unaffected", "version": "0", "lessThan": "6.8", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.251", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.201", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.164", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.125", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.72", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.11", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.1", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/crypto/virtio/virtio_crypto_core.c"], "defaultStatus": "affected"}]}, {"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e", "affectedData": [{"vendor": "Siemens", "product": "RUGGEDCOM RST2428P", "versions": [{"status": "affected", "version": "0", "lessThan": "V4.0", "versionType": "custom"}], "defaultStatus": "unknown"}]}], "published": "2026-02-18T16:22:32.693", "references": [{"url": "https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html", "source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: virtio - Add spinlock protection with virtqueue notification\n\nWhen VM boots with one virtio-crypto PCI device and builtin backend,\nrun openssl benchmark command with multiple processes, such as\n openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32\n\nopenssl processes will hangup and there is error reported like this:\n virtio_crypto virtio0: dataq.0:id 3 is not a head!\n\nIt seems that the data virtqueue need protection when it is handled\nfor virtio done notification. If the spinlock protection is added\nin virtcrypto_done_task(), openssl benchmark with multiple processes\nworks well."}, {"lang": "es", "value": "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux: \n\ncrypto: virtio - A\u00f1adir protecci\u00f3n con spinlock con notificaci\u00f3n de virtqueue\n\nCuando una VM arranca con un dispositivo PCI virtio-crypto y un backend integrado,\nejecutar el comando de benchmark de OpenSSL con m\u00faltiples procesos, como\n openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32\n\nlos procesos de OpenSSL se colgar\u00e1n y se reporta un error como este:\n virtio_crypto virtio0: dataq.0:id 3 is not a head!\n\nParece que el virtqueue de datos necesita protecci\u00f3n cuando se maneja\npara la notificaci\u00f3n de finalizaci\u00f3n de virtio. Si se a\u00f1ade la protecci\u00f3n con spinlock\nen virtcrypto_done_task(), el benchmark de OpenSSL con m\u00faltiples procesos\nfunciona correctamente."}], "lastModified": "2026-06-17T10:21:08.677", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37284183-45F5-4920-9AD1-228BBCEC94A8", "versionEndExcluding": "4.20", "versionStartIncluding": "4.19.306"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E4BEAC0-E873-440D-A75E-55699C2412A4", "versionEndExcluding": "5.5", "versionStartIncluding": "5.4.268"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D38366FE-C4CC-4677-BDBA-A6047B5B666B", "versionEndExcluding": "5.10.251", "versionStartIncluding": "5.10.209"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8470B9F-FA9B-4F8F-AC1F-A6D52A42D2ED", "versionEndExcluding": "5.15.201", "versionStartIncluding": "5.15.148"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9520DDD6-B47A-47A5-8BA6-631469420E89", "versionEndExcluding": "6.1.164", "versionStartIncluding": "6.1.75"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F7CEBA0-0AB1-4362-9BE0-625B2FBB5CB0", "versionEndExcluding": "6.6.125", "versionStartIncluding": "6.6.14"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "031BE183-1B96-47CD-9ED4-17FD22A726ED", "versionEndExcluding": "6.12.72", "versionStartIncluding": "6.7.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7099A9EC-3D54-4424-BF01-7224EF88C79C", "versionEndExcluding": "6.18.11", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE543C0D-A06B-414F-A403-CB1E088F261E", "versionEndExcluding": "6.19.1", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}