{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23229", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-01-13T15:37:45.988Z", "datePublished": "2026-02-18T14:53:33.015Z", "dateUpdated": "2026-05-11T22:02:49.242Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:02:49.242Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: virtio - Add spinlock protection with virtqueue notification\n\nWhen VM boots with one virtio-crypto PCI device and builtin backend,\nrun openssl benchmark command with multiple processes, such as\n openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32\n\nopenssl processes will hangup and there is error reported like this:\n virtio_crypto virtio0: dataq.0:id 3 is not a head!\n\nIt seems that the data virtqueue need protection when it is handled\nfor virtio done notification. If the spinlock protection is added\nin virtcrypto_done_task(), openssl benchmark with multiple processes\nworks well."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/virtio/virtio_crypto_core.c"], "versions": [{"version": "0eb69890e86775d178452880ea0d24384c5ccedf", "lessThan": "552475d0b6cece73a52c0fa5faa0ce45e99df74b", "status": "affected", "versionType": "git"}, {"version": "75cba72ddb788a5b9c7ed2139fbb84383df029eb", "lessThan": "8ee8ccfd60bf17cbdab91069d324b5302f4f3a30", "status": "affected", "versionType": "git"}, {"version": "ae4747dab2eab95a68bb2f6c7e904bff0424e1b1", "lessThan": "c9e594194795c86ca753ad6ed64c2762e9309d0d", "status": "affected", "versionType": "git"}, {"version": "c4c54fce9ec54a59a4ca035af13c2823c76684cc", "lessThan": "d6f0d586808689963e58fd739bed626ff5013b24", "status": "affected", "versionType": "git"}, {"version": "fed93fb62e05c38152b0fc1dc9609639e63eed76", "lessThan": "c0a0ded3bb7fd45f720faa48449a930153257d3a", "status": "affected", "versionType": "git"}, {"version": "fed93fb62e05c38152b0fc1dc9609639e63eed76", "lessThan": "e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2", "status": "affected", "versionType": "git"}, {"version": "fed93fb62e05c38152b0fc1dc9609639e63eed76", "lessThan": "49c57c6c108931a914ed94e3c0ddb974008260a3", "status": "affected", "versionType": "git"}, {"version": "fed93fb62e05c38152b0fc1dc9609639e63eed76", "lessThan": "b505047ffc8057555900d2d3a005d033e6967382", "status": "affected", "versionType": "git"}, {"version": "96be18c8fff9d57e29621386e2fa17268383ea27", "status": "affected", "versionType": "git"}, {"version": "830a4f073f7edd2cc4f30ba95bdc3495d97c2550", "status": "affected", "versionType": "git"}, {"version": "8862c0d2e47ba1733d9687fe0ff4e02d6e391255", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/crypto/virtio/virtio_crypto_core.c"], "versions": [{"version": "6.8", "status": "affected"}, {"version": "0", "lessThan": "6.8", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.251", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.201", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.164", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.125", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.72", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.11", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.1", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.209", "versionEndExcluding": "5.10.251"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.148", "versionEndExcluding": "5.15.201"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.75", "versionEndExcluding": "6.1.164"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.14", "versionEndExcluding": "6.6.125"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.12.72"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.18.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "6.19.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.8", "versionEndExcluding": "7.0"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19.306"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.268"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b"}, {"url": "https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30"}, {"url": "https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d"}, {"url": "https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24"}, {"url": "https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a"}, {"url": "https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2"}, {"url": "https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3"}, {"url": "https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382"}], "title": "crypto: virtio - Add spinlock protection with virtqueue notification", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "37284183-45F5-4920-9AD1-228BBCEC94A8", "versionEndExcluding": "4.20", "versionStartIncluding": "4.19.306", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "2E4BEAC0-E873-440D-A75E-55699C2412A4", "versionEndExcluding": "5.5", "versionStartIncluding": "5.4.268", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D38366FE-C4CC-4677-BDBA-A6047B5B666B", "versionEndExcluding": "5.10.251", "versionStartIncluding": "5.10.209", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A8470B9F-FA9B-4F8F-AC1F-A6D52A42D2ED", "versionEndExcluding": "5.15.201", "versionStartIncluding": "5.15.148", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "9520DDD6-B47A-47A5-8BA6-631469420E89", "versionEndExcluding": "6.1.164", "versionStartIncluding": "6.1.75", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F7CEBA0-0AB1-4362-9BE0-625B2FBB5CB0", "versionEndExcluding": "6.6.125", "versionStartIncluding": "6.6.14", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "031BE183-1B96-47CD-9ED4-17FD22A726ED", "versionEndExcluding": "6.12.72", "versionStartIncluding": "6.7.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "7099A9EC-3D54-4424-BF01-7224EF88C79C", "versionEndExcluding": "6.18.11", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "EE543C0D-A06B-414F-A403-CB1E088F261E", "versionEndExcluding": "6.19.1", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: virtio - Add spinlock protection with virtqueue notification\n\nWhen VM boots with one virtio-crypto PCI device and builtin backend,\nrun openssl benchmark command with multiple processes, such as\n openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32\n\nopenssl processes will hangup and there is error reported like this:\n virtio_crypto virtio0: dataq.0:id 3 is not a head!\n\nIt seems that the data virtqueue need protection when it is handled\nfor virtio done notification. If the spinlock protection is added\nin virtcrypto_done_task(), openssl benchmark with multiple processes\nworks well."}, {"lang": "es", "value": "Se ha resuelto la siguiente vulnerabilidad en el kernel de Linux: \n\ncrypto: virtio - A\u00f1adir protecci\u00f3n con spinlock con notificaci\u00f3n de virtqueue\n\nCuando una VM arranca con un dispositivo PCI virtio-crypto y un backend integrado,\nejecutar el comando de benchmark de OpenSSL con m\u00faltiples procesos, como\n openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32\n\nlos procesos de OpenSSL se colgar\u00e1n y se reporta un error como este:\n virtio_crypto virtio0: dataq.0:id 3 is not a head!\n\nParece que el virtqueue de datos necesita protecci\u00f3n cuando se maneja\npara la notificaci\u00f3n de finalizaci\u00f3n de virtio. Si se a\u00f1ade la protecci\u00f3n con spinlock\nen virtcrypto_done_task(), el benchmark de OpenSSL con m\u00faltiples procesos\nfunciona correctamente."}], "id": "CVE-2026-23229", "lastModified": "2026-03-18T13:25:23.100", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2026-02-18T16:22:32.693", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: crypto: virtio - Add spinlock protection with virtqueue notification", "id": "2440664", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2440664"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "details": ["No description is available for this CVE."], "name": "CVE-2026-23229", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-02-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-23229\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-23229\nhttps://lore.kernel.org/linux-cve-announce/2026021808-CVE-2026-23229-9dfe@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,d6f0d586808689963e58fd739bed626ff5013b24)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,c0a0ded3bb7fd45f720faa48449a930153257d3a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,49c57c6c108931a914ed94e3c0ddb974008260a3)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.125,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.72,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.11,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.1,6.20.0)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "analysis": {"en": {"generated_at": "2026-04-15T15:46:58.154420+00:00", "value": {"mitigation_remediation": ["Update the Linux kernel to a patched release that includes the spinlock protection around virtqueue notifications", "Reboot the system after upgrading to ensure the new kernel is active and the protection is in place", "If a kernel update is not yet available, limit concurrent use of OpenSSL or other applications that employ the virtio-crypto backend to single-threaded or low-concurrency modes until the patch is applied"], "summary": {"action": "Apply Patch", "impact": "Denial of Service via process hang and error in virtio-crypto virtqueue"}, "threat_synthesis": {"affected_systems": "All Linux distributions that ship a kernel with the virtio-crypto driver and a builtin backend. The kernel CPE string indicates that the issue applies to the kernel release itself, not a specific vendor build, so any distribution kernel that has not been updated to include the spinlock protection is affected. The vendor list lists Linux:Linux twice, signifying a general kernel vulnerability. The affected versions are not enumerated in the source, so any release prior to the patch remains vulnerable.", "description_and_impact": "The vulnerability originates from a missing spinlock around the virtqueue used by virtio-crypto. When a virtual machine boots with a virtio-crypto PCI device and the builtin backend is active, running multiple OpenSSL benchmark processes causes the kernel to hang and emit an error indicating a corrupted virtqueue pointer. The lack of synchronization results in a race condition that can lead to abrupt process termination and inconsistent state inside the virtio-crypto subsystem, thereby denying service to legitimate workloads. The weakness is a classic race condition, where concurrent access to shared data without adequate locking yields corruption. This disorder can manifest during high concurrency scenarios, particularly when external applications overuse the crypto engine, and can be triggered via normal user activity such as cryptographic workloads.", "risk_and_exploitability": "The severity of the issue is scored as a CVSS of 5.5, placing it in the moderate range. Exploitation likelihood is estimated to be low, with an EPSS score below 1%, and the vulnerability is not listed in the CISA KEV catalog. Attacks would require a user to run multiple concurrent OpenSSL or similar processes targeting the virtio-crypto device, a scenario that may occur by default on modern workloads. Because the flaw does not expose remote code execution or privilege escalation, the immediate threat is limited to service interruption. Nonetheless, the presence of a race condition in a core kernel module warrants prompt attention, particularly for systems exposed to high concurrency cryptographic operations."}}}}, "created": "2026-02-19T10:11:43.463252+00:00", "updated": "2026-04-15T17:15:10.607396+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}