CVE-2026-23121

mISDN: annotate data-race around dev->work

State: Published
Severity: Not scored
Published: Feb 14, 2026
Updated: Oct 19, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mISDN: annotate data-race around dev->work

dev->work can re read locklessly in mISDN_read() and mISDN_poll(). Add READ_ONCE()/WRITE_ONCE() annotations.

BUG: KCSAN: data-race in mISDN_ioctl / mISDN_read

write to 0xffff88812d848280 of 4 bytes by task 10864 on cpu 1: misdn_add_timer drivers/isdn/mISDN/timerdev.c:175 [inline] mISDN_ioctl+0x2fb/0x550 drivers/isdn/mISDN/timerdev.c:233 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xce/0x140 fs/ioctl.c:583 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:583 x64_sys_call+0x14b0/0x3000 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f

read to 0xffff88812d848280 of 4 bytes by task 10857 on cpu 0: mISDN_read+0x1f2/0x470 drivers/isdn/mISDN/timerdev.c:112 do_loop_readv_writev fs/read_write.c:847 [inline] vfs_readv+0x3fb/0x690 fs/read_write.c:1020 do_readv+0xe7/0x210 fs/read_write.c:1080 __do_sys_readv fs/read_write.c:1165 [inline] __se_sys_readv fs/read_write.c:1162 [inline] __x64_sys_readv+0x45/0x50 fs/read_write.c:1162 x64_sys_call+0x2831/0x3000 arch/x86/include/generated/asm/syscalls_64.h:20 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f

value changed: 0x00000000 -> 0x00000001

Scores

The record has no CVSS score.

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	1b2b03f8e514e4f68e293846ba511a948b80243c to before d5d99cb9e0839093cd53aa3b28176fce2f820ca0Affected 1b2b03f8e514e4f68e293846ba511a948b80243c to before 13f3b3b87068898056db4c79ee67052fbde11d43Affected 1b2b03f8e514e4f68e293846ba511a948b80243c to before accc3f8266d2a49881dbcf78c459477f4efa0ff3Affected 1b2b03f8e514e4f68e293846ba511a948b80243c to before fc8ba17fd3337bd8b1913c30b95df0fee00d8fb7Affected 1b2b03f8e514e4f68e293846ba511a948b80243c to before aa6e33cd74ca4965f2bbcb025e0b672fb0168a69Affected 1b2b03f8e514e4f68e293846ba511a948b80243c to before 7ac345a93af31358e18e9606eb7b354691bf6757Affected 1b2b03f8e514e4f68e293846ba511a948b80243c to before 8175dbf174d487afab81e936a862a8d9b8a1ccb6Affected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 5.10.249 through 5.10.Not affected 5.15.199 through 5.15.Not affected 6.1.162 through 6.1.Not affected 6.6.122 through 6.6.Not affected 6.12.68 through 6.12.Not affected 6.18.8 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

1b2b03f8e514e4f68e293846ba511a948b80243c to before d5d99cb9e0839093cd53aa3b28176fce2f820ca0Affected
1b2b03f8e514e4f68e293846ba511a948b80243c to before 13f3b3b87068898056db4c79ee67052fbde11d43Affected
1b2b03f8e514e4f68e293846ba511a948b80243c to before accc3f8266d2a49881dbcf78c459477f4efa0ff3Affected
1b2b03f8e514e4f68e293846ba511a948b80243c to before fc8ba17fd3337bd8b1913c30b95df0fee00d8fb7Affected
1b2b03f8e514e4f68e293846ba511a948b80243c to before aa6e33cd74ca4965f2bbcb025e0b672fb0168a69Affected
1b2b03f8e514e4f68e293846ba511a948b80243c to before 7ac345a93af31358e18e9606eb7b354691bf6757Affected
1b2b03f8e514e4f68e293846ba511a948b80243c to before 8175dbf174d487afab81e936a862a8d9b8a1ccb6Affected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
5.10.249 through 5.10.*Not affected
5.15.199 through 5.15.*Not affected
6.1.162 through 6.1.*Not affected
6.6.122 through 6.6.*Not affected
6.12.68 through 6.12.*Not affected
6.18.8 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.