CVE-2026-23232
Received Received - Intake
Deadlock Vulnerability in Linux Kernel f2fs Checkpoint Handling

Publication date: 2026-03-04

Last updated on: 2026-03-17

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()" This reverts commit 196c81fdd438f7ac429d5639090a9816abb9760a. Original patch may cause below deadlock, revert it. write remount - write_begin - lock_page --- lock A - prepare_write_begin - f2fs_map_lock - f2fs_enable_checkpoint - down_write(cp_enable_rwsem) --- lock B - sync_inode_sb - writepages - lock_page --- lock A - down_read(cp_enable_rwsem) --- lock A
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-04
Last Modified
2026-03-17
Generated
2026-06-16
AI Q&A
2026-03-04
EPSS Evaluated
2026-06-14
NVD
CVE-2026-23232
EUVD
EUVD-2026-9404
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel From 6.19 (inc) to 6.19.3 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-667 The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel is related to a deadlock issue caused by a specific commit involving the f2fs filesystem. The original patch introduced a sequence of locks during write and remount operations that could lead to a deadlock situation. Specifically, the deadlock arises from conflicting lock acquisitions between write operations and checkpoint enabling, involving locks on pages and a read-write semaphore. The vulnerability was resolved by reverting the problematic commit.

Impact Analysis

This vulnerability can cause a deadlock in the Linux kernel's f2fs filesystem operations. A deadlock means that certain processes or threads may become stuck waiting indefinitely for locks to be released, potentially causing system hangs or degraded performance. This can impact system stability and availability, especially in environments relying on the f2fs filesystem.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

The vulnerability has been resolved by reverting the commit 196c81fdd438f7ac429d5639090a9816abb9760a that caused a deadlock in the Linux kernel's f2fs filesystem code.

To mitigate this vulnerability, you should update your Linux kernel to a version that includes this revert patch, effectively removing the problematic commit.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23232. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart