CVE-2026-23229
Published: Feb 18, 2026
Modified: Jun 2, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 0eb69890e86775d178452880ea0d24384c5ccedf - < 552475d0b6cece73a52c0fa5faa0ce45e99df74baffected 75cba72ddb788a5b9c7ed2139fbb84383df029eb - < 8ee8ccfd60bf17cbdab91069d324b5302f4f3a30affected ae4747dab2eab95a68bb2f6c7e904bff0424e1b1 - < c9e594194795c86ca753ad6ed64c2762e9309d0daffected c4c54fce9ec54a59a4ca035af13c2823c76684cc - < d6f0d586808689963e58fd739bed626ff5013b24affected fed93fb62e05c38152b0fc1dc9609639e63eed76 - < c0a0ded3bb7fd45f720faa48449a930153257d3a+13 more versions |
Linux | Linux | affected 6.8unaffected 0 - < 6.8unaffected 5.10.251 - <= 5.10.*unaffected 5.15.201 - <= 5.15.*unaffected 6.1.164 - <= 6.1.*+5 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now