CVE-2026-23168

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the flexible proportions code. A lockdep splat can occur due to a race condition within the fprop new period() function. Specifically, the issue arises when a timer fires within softirq context, calling writeout period which then invokes fprop new period(). Simultaneously, a hardirq can be raised, leading to an indefinite loop when reading the sequence counter due to an odd sequence value. This condition is more likely to occur with FUSE block device interfaces (bdis) that have configured a maximum fraction of writeout throughput. The vulnerability is related to the sequence counter write section not being irqsafe.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.