CVE-2026-23232

Received Received - Intake

Deadlock Vulnerability in Linux Kernel f2fs Checkpoint Handling

Publication date: 2026-03-04

Last updated on: 2026-03-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: Revert "f2fs: block cache/dio write during f2fs_enable_checkpoint()" This reverts commit 196c81fdd438f7ac429d5639090a9816abb9760a. Original patch may cause below deadlock, revert it. write remount - write_begin - lock_page --- lock A - prepare_write_begin - f2fs_map_lock - f2fs_enable_checkpoint - down_write(cp_enable_rwsem) --- lock B - sync_inode_sb - writepages - lock_page --- lock A - down_read(cp_enable_rwsem) --- lock A

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-04

Last Modified

2026-03-17

Generated

2026-07-06

AI Q&A

2026-03-04

EPSS Evaluated

2026-07-04

NVD

CVE-2026-23232

EUVD

EUVD-2026-9404

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.19 (inc) to 6.19.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-667	The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel is related to a deadlock issue caused by a specific commit involving the f2fs filesystem. The original patch introduced a sequence of locks during write and remount operations that could lead to a deadlock situation. Specifically, the deadlock arises from conflicting lock acquisitions between write operations and checkpoint enabling, involving locks on pages and a read-write semaphore. The vulnerability was resolved by reverting the problematic commit.

Impact Analysis

This vulnerability can cause a deadlock in the Linux kernel's f2fs filesystem operations. A deadlock means that certain processes or threads may become stuck waiting indefinitely for locks to be released, potentially causing system hangs or degraded performance. This can impact system stability and availability, especially in environments relying on the f2fs filesystem.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

The vulnerability has been resolved by reverting the commit 196c81fdd438f7ac429d5639090a9816abb9760a that caused a deadlock in the Linux kernel's f2fs filesystem code.

To mitigate this vulnerability, you should update your Linux kernel to a version that includes this revert patch, effectively removing the problematic commit.

Hi! I’m here to help you understand CVE-2026-23232. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70