CVE-2026-23199 addresses a deadlock vulnerability in the Linux kernel's procfs, specifically within the PROCMAP_QUERY function. This flaw occurs when fetching build IDs while holding a VMA lock, leading to a potential deadlock scenario as identified by syzbot. The vulnerability has been resolved by ensuring the build ID is fetched only after dropping the relevant locks, preventing the conflicting lock acquisition. The severity of this vulnerability is moderate, with a FAUCET Risk Score of 20/100. While a direct attack vector isn't explicitly detailed, the deadlock could lead to system instability or denial of service. The complexity of exploiting this vulnerability is likely high, given it involves specific kernel locking mechanisms. There is no evidence of active exploitation for CVE-2026-23199, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, indicating a low level of public awareness or concern regarding this specific issue.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.11, < 6.12.70CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.13, < 6.18.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.19CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:* | ||
6.19CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:* | ||
6.19CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.19:rc3:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.