CVE-2026-23138

EUVD-2026-5899
In the Linux kernel, the following vulnerability has been resolved:

tracing: Add recursion protection in kernel stack trace recording

A bug was reported about an infinite recursion caused by tracing the rcu
events with the kernel stack trace trigger enabled. The stack trace code
called back into RCU which then called the stack trace again.

Expand the ftrace recursion protection to add a set of bits to protect
events from recursion. Each bit represents the context that the event is
in (normal, softirq, interrupt and NMI).

Have the stack trace code use the interrupt context to protect against
recursion.

Note, the bug showed an issue in both the RCU code as well as the tracing
stacktrace code. This only handles the tracing stack trace side of the
bug. The RCU fix will be handled separately.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
5.8 ≤
𝑥
< 6.18.6
linuxlinux_kernel
6.19:rc1
linuxlinux_kernel
6.19:rc2
linuxlinux_kernel
6.19:rc3
linuxlinux_kernel
6.19:rc4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
vulnerable
bookworm (security)
vulnerable
bullseye
vulnerable
bullseye (security)
vulnerable
forky
7.0.13-1
fixed
sid
7.1.3-1
fixed
trixie
6.12.86-1
fixed
trixie (security)
6.12.94-1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
bpftool6.12
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
bpftool6.12-debuginfo
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel-livepatch-6.12.79-101.147
Amazon Linux 2023
1:1.0-0.amzn2023
fixed
kernel6.12
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-debuginfo
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-debuginfo-common-aarch64
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-debuginfo-common-x86_64
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-devel
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-headers
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-libbpf
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-libbpf-debuginfo
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-libbpf-devel
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-libbpf-static
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-modules-extra
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-modules-extra-common
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-tools
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-tools-debuginfo
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
kernel6.12-tools-devel
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
perf6.12
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
perf6.12-debuginfo
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
python3-perf6.12
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
python3-perf6.12-debuginfo
Amazon Linux 2023
1:6.12.79-101.147.amzn2023
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
kernel
Azure Linux 3.0
0:6.6.130.1-3.azl3
fixed