Tracker / CVE-2026-23229
CVE-2026-23229
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well.
Affected products and versions
| linux | linux_kernel · 4.19.306 → 4.20 |
|---|---|
| linux | linux_kernel · 5.10.209 → 5.10.251 |
| linux | linux_kernel · 5.15.148 → 5.15.201 |
| linux | linux_kernel · 5.4.268 → 5.5 |
| linux | linux_kernel · 6.1.75 → 6.1.164 |
| linux | linux_kernel · 6.13 → 6.18.11 |
| linux | linux_kernel · 6.19 → 6.19.1 |
| linux | linux_kernel · 6.6.14 → 6.6.125 |
| linux | linux_kernel · 6.7.2 → 6.12.72 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.