CVE-2026-23097
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/02/2026
Last modified:
18/03/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
migrate: correct lock ordering for hugetlb file folios<br />
<br />
Syzbot has found a deadlock (analyzed by Lance Yang):<br />
<br />
1) Task (5749): Holds folio_lock, then tries to acquire i_mmap_rwsem(read lock).<br />
2) Task (5754): Holds i_mmap_rwsem(write lock), then tries to acquire<br />
folio_lock.<br />
<br />
migrate_pages()<br />
-> migrate_hugetlbs()<br />
-> unmap_and_move_huge_page() remove_migration_ptes()<br />
-> __rmap_walk_file()<br />
-> i_mmap_lock_read() hugetlbfs_punch_hole() hugetlbfs_zero_partial_page()<br />
-> filemap_lock_hugetlb_folio()<br />
-> filemap_lock_folio()<br />
-> __filemap_get_folio
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.9.9 (including) | 5.10 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.10.1 (including) | 5.10.249 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.11 (including) | 5.15.199 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 5.16 (including) | 6.1.162 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (including) | 6.6.122 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.7 (including) | 6.12.68 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.18.8 (excluding) |
| cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.10:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.10:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.10:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:5.10:rc7:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/1b68efce6dd483d22f50d0d3800c4cfda14b1305
- https://git.kernel.org/stable/c/526394af4e8ade89cacd1a9ce2b97712712fcc34
- https://git.kernel.org/stable/c/5edb9854f8df5428b40990a1c7d60507da5bd330
- https://git.kernel.org/stable/c/ad97b9a55246eb940a26ac977f80892a395cabf9
- https://git.kernel.org/stable/c/b75070823b89009f5123fd0e05a8e0c3d39937c1
- https://git.kernel.org/stable/c/b7880cb166ab62c2409046b2347261abf701530e
- https://git.kernel.org/stable/c/e7396d23f9d5739f56cf9ab430c3a169f5508394



