CVE-2026-23419

linux: In the Linux kernel, the following vulnerability has been resolved: net/rds: Fix circular locking dependency in rds_...

CVE-2026-23419 is fixed in 59 products on 1 platform, first by DEBIAN-CVE-2026-23419, released April 3, 2026. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0019
9th percentile

In the Linux kernel, the following vulnerability has been resolved: net/rds: Fix circular locking dependency in rds_tcp_tune syzbot reported a circular locking dependency in rds_tcp_tune() where sk_net_refcnt_upgrade() is called while holding the socket lock: ====================================================== WARNING: possible circular locking dependency detected ====================================================== kworker/u10:8/15040 is trying to acquire lock: ffffffff8e9aaf80 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x4b/0x6f0 but task is already holding lock: ffff88805a3c1ce0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: rds_tcp_tune+0xd7/0x930 The issue occurs because sk_net_refcnt_upgrade() performs memory allocation (via get_net_track() -> ref_tracker_alloc()) while the socket lock is held, creating a circular dependency with fs_reclaim. Fix this by moving sk_net_refcnt_upgrade() outside the socket lock critical section. This is safe because the fields modified by the sk_net_refcnt_upgrade() call (sk_net_refcnt, ns_tracker) are not accessed by any concurrent code path at this point. v2: - Corrected fixes tag - check patch line wrap nits - ai commentary nits

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool6.12 · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
bpftool6.12-debuginfo · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
bpftool6.18 · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
bpftool6.18-debuginfo · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-64kb · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-azure · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-azure · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-default · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-default · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.27.1.160000.2.8 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.55.1.150700.17.33.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-docs · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-livepatch-6.12.77-99.140 · amzn 2023 1:1.0-0.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel-livepatch-6.18.20-20.229 · amzn 2023 1:1.0-0.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel-livepatch-SLE15-SP7_Update_15 · sles 15.7 1-150700.15.3.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-rt · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-source · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-source · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-syms · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.55.1 SUSE-SU-2026:2238-1 Jun 30, 2026
kernel6.12 · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-debuginfo · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-debuginfo-common-aarch64 · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-debuginfo-common-x86_64 · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-devel · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-headers · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-libbpf · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-libbpf-debuginfo · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-libbpf-devel · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-libbpf-static · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-modules-extra · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-modules-extra-common · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-tools · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-tools-debuginfo · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.12-tools-devel · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
kernel6.18 · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-debuginfo · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-debuginfo-common-aarch64 · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-debuginfo-common-x86_64 · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-devel · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-headers · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-libbpf · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-libbpf-debuginfo · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-libbpf-devel · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-libbpf-static · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-modules-extra · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-modules-extra-common · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-tools · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-tools-debuginfo · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
kernel6.18-tools-devel · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
linux · Debian 13.5 (trixie) 6.12.85-1 DEBIAN-CVE-2026-23419 Apr 3, 2026
linux · Debian 14 6.19.8-1 DEBIAN-CVE-2026-23419 Apr 3, 2026
perf6.12 · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
perf6.12-debuginfo · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
perf6.18 · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
perf6.18-debuginfo · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
python3-perf6.12 · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
python3-perf6.12-debuginfo · amzn 2023 1:6.12.77-99.140.amzn2023 ALAS2023-2026-1543 Apr 7, 2026
python3-perf6.18 · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026
python3-perf6.18-debuginfo · amzn 2023 1:6.18.20-20.229.amzn2023 ALAS2023-2026-1596 Apr 27, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.