blktrace: fix __this_cpu_read/write in preemptible context
CVE-2026-23374 is fixed in 64 products on 1 platform, first by DEBIAN-CVE-2026-23374, released March 25, 2026. It is not reported as exploited. Patch Radar priority: High.
In the Linux kernel, the following vulnerability has been resolved: blktrace: fix __this_cpu_read/write in preemptible context tracing_record_cmdline() internally uses __this_cpu_read() and __this_cpu_write() on the per-CPU variable trace_cmdline_save, and trace_save_cmdline() explicitly asserts preemption is disabled via lockdep_assert_preemption_disabled(). These operations are only safe when preemption is off, as they were designed to be called from the scheduler context (probe_wakeup_sched_switch() / probe_wakeup()). __blk_add_trace() was calling tracing_record_cmdline(current) early in the blk_tracer path, before ring buffer reservation, from process context where preemption is fully enabled. This triggers the following using blktests/blktrace/002: blktrace/002 (blktrace ftrace corruption with sysfs trace) [failed] runtime 0.367s ... 0.437s something found in dmesg: [ 81.211018] run blktests blktrace/002 at 2026-02-25 22:24:33 [ 81.239580] null_blk: disk nullb1 created [ 81.357294] BUG: using __this_cpu_read() in preemptible [00000000] code: dd/2516 [ 81.362842] caller is tracing_record_cmdline+0x10/0x40 [ 81.362872] CPU: 16 UID: 0 PID: 2516 Comm: dd Tainted: G N 7.0.0-rc1lblk+ #84 PREEMPT(full) [ 81.362877] Tainted: [N]=TEST [ 81.362878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014 [ 81.362881] Call Trace: [ 81.362884] <TASK> [ 81.362886] dump_stack_lvl+0x8d/0xb0 ... (See '/mnt/sda/blktests/results/nodev/blktrace/002.dmesg' for the entire message) [ 81.211018] run blktests blktrace/002 at 2026-02-25 22:24:33 [ 81.239580] null_blk: disk nullb1 created [ 81.357294] BUG: using __this_cpu_read() in preemptible [00000000] code: dd/2516 [ 81.362842] caller is tracing_record_cmdline+0x10/0x40 [ 81.362872] CPU: 16 UID: 0 PID: 2516 Comm: dd Tainted: G N 7.0.0-rc1lblk+ #84 PREEMPT(full) [ 81.362877] Tainted: [N]=TEST [ 81.362878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014 [ 81.362881] Call Trace: [ 81.362884] <TASK> [ 81.362886] dump_stack_lvl+0x8d/0xb0 [ 81.362895] check_preemption_disabled+0xce/0xe0 [ 81.362902] tracing_record_cmdline+0x10/0x40 [ 81.362923] __blk_add_trace+0x307/0x5d0 [ 81.362934] ? lock_acquire+0xe0/0x300 [ 81.362940] ? iov_iter_extract_pages+0x101/0xa30 [ 81.362959] blk_add_trace_bio+0x106/0x1e0 [ 81.362968] submit_bio_noacct_nocheck+0x24b/0x3a0 [ 81.362979] ? lockdep_init_map_type+0x58/0x260 [ 81.362988] submit_bio_wait+0x56/0x90 [ 81.363009] __blkdev_direct_IO_simple+0x16c/0x250 [ 81.363026] ? __pfx_submit_bio_wait_endio+0x10/0x10 [ 81.363038] ? rcu_read_lock_any_held+0x73/0xa0 [ 81.363051] blkdev_read_iter+0xc1/0x140 [ 81.363059] vfs_read+0x20b/0x330 [ 81.363083] ksys_read+0x67/0xe0 [ 81.363090] do_syscall_64+0xbf/0xf00 [ 81.363102] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.363106] RIP: 0033:0x7f281906029d [ 81.363111] Code: 31 c0 e9 c6 fe ff ff 50 48 8d 3d 66 63 0a 00 e8 59 ff 01 00 66 0f 1f 84 00 00 00 00 00 80 3d 41 33 0e 00 00 74 17 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 5b c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec [ 81.363113] RSP: 002b:00007ffca127dd48 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.363120] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f281906029d [ 81.363122] RDX: 0000000000001000 RSI: 0000559f8bfae000 RDI: 0000000000000000 [ 81.363123] RBP: 0000000000001000 R08: 0000002863a10a81 R09: 00007f281915f000 [ 81.363124] R10: 00007f2818f77b60 R11: 0000000000000246 R12: 0000559f8bfae000 [ 81.363126] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000000a [ 81.363142] </TASK> The same BUG fires from blk_add_trace_plug(), blk_add_trace_unplug(), and blk_add_trace_rq() paths as well. The purpose of tracin ---truncated---
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| bpftool6.12 · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| bpftool6.12-debuginfo · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel-64kb · sles 15.7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel-azure · sles 15.7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel-default · sles 15.7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel-default-base · sles 15.7 | 6.4.0-150700.53.55.1.150700.17.33.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel-docs · sles 15.7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel-livepatch-6.12.83-113.160 · amzn 2023 | 1:1.0-0.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel-livepatch-SLE15-SP7_Update_15 · sles 15.7 | 1-150700.15.3.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel-obs-build · sles 15.7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel-source · sles 15.7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel-syms · sles 15.7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel-uek · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-core · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-core · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-core · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-core · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-devel · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-devel · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-core · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-core · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-deprecated · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-deprecated · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-desktop · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-desktop · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-extra · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-extra · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-extra-netfilter · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-extra-netfilter · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-usb · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-usb · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-wireless · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-debug-modules-wireless · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-devel · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-devel · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-doc · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-doc · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-core · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-core · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-deprecated · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-deprecated · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-desktop · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-desktop · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-extra · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-extra · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-extra-netfilter · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-extra-netfilter · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-usb · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-usb · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-wireless · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-modules-wireless · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-tools · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek-tools · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-core · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-core · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-devel · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-devel · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-core · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-core · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-deprecated · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-deprecated · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-desktop · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-desktop · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-extra · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-extra · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-extra-netfilter · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-extra-netfilter · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-usb · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-usb · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-wireless · ol 10 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-uek64k-modules-wireless · ol 9 | 0:6.12.0-204.92.4.2.el9uek | ELSA-2026-50372 | Jul 2, 2026 |
| kernel-zfcpdump · sles 15.7 | 6.4.0-150700.53.55.1 | SUSE-SU-2026:2238-1 | Jun 30, 2026 |
| kernel6.12 · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-debuginfo · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-debuginfo-common-aarch64 · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-debuginfo-common-x86_64 · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-devel · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-headers · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-modules-extra · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-modules-extra-common · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-tools · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-tools-debuginfo · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| kernel6.12-tools-devel · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| linux · Debian 13.5 (trixie) | 6.12.85-1 | DEBIAN-CVE-2026-23374 | Mar 25, 2026 |
| linux · Debian 14 | 6.19.8-1 | DEBIAN-CVE-2026-23374 | Mar 25, 2026 |
| perf6.12 · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| perf6.12-debuginfo · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| python3-perf6.12 · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
| python3-perf6.12-debuginfo · amzn 2023 | 1:6.12.83-113.160.amzn2023 | ALAS2023-2026-1695 | May 8, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.