CVE-2026-23179: nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: fixup hang in nvmettcplistendataready()
When the socket is closed while in TCPLISTEN a callback is run to flush all outstanding packets, which in turns calls nvmettcplistendataready() with the skcallbacklock held. So we need to check if we are in TCPLISTEN before attempting to get the skcallbacklock() to avoid a deadlock.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23179?
CVE-2026-23179 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2026-23179?
To fix CVE-2026-23179, upgrade to the patched version of the Linux kernel that addresses this vulnerability.
What does CVE-2026-23179 affect?
CVE-2026-23179 affects the nvmet-tcp component in the Linux kernel.
What is the impact of CVE-2026-23179?
The impact of CVE-2026-23179 is a potential hang in the nvmet_tcp_listen_data_ready function when a socket is closed.
Is CVE-2026-23179 related to network functionality?
Yes, CVE-2026-23179 is related to TCP network functionality in the Linux kernel.