CVE-2026-23138

tracing: Add recursion protection in kernel stack trace recording

State: Published
Severity: Not scored
Published: Feb 14, 2026
Updated: Oct 30, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing: Add recursion protection in kernel stack trace recording

A bug was reported about an infinite recursion caused by tracing the rcu events with the kernel stack trace trigger enabled. The stack trace code called back into RCU which then called the stack trace again.

Expand the ftrace recursion protection to add a set of bits to protect events from recursion. Each bit represents the context that the event is in (normal, softirq, interrupt and NMI).

Have the stack trace code use the interrupt context to protect against recursion.

Note, the bug showed an issue in both the RCU code as well as the tracing stacktrace code. This only handles the tracing stack trace side of the bug. The RCU fix will be handled separately.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 80fe242a6239778025ba3be8e7263e3d69c37947Affected 5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 9b03768037d91ce727effb1c5d92d2c7781bf692Affected 5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 19e18e6dabb1bbba76d2809ca7d8ae9e1f5975feAffected 5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 5b7f91acffd2c4c000971553d22efa1e1bb4feaeAffected 5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 5f1ef0dfcb5b7f4a91a9b0e0ba533efd9f7e2cdbAffected
LinuxLinux	5.8Affected before 5.8Not affected 6.1.191 through 6.1.Not affected 6.6.130 through 6.6.Not affected 6.12.78 through 6.12.Not affected 6.18.6 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 80fe242a6239778025ba3be8e7263e3d69c37947Affected
5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 9b03768037d91ce727effb1c5d92d2c7781bf692Affected
5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 19e18e6dabb1bbba76d2809ca7d8ae9e1f5975feAffected
5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 5b7f91acffd2c4c000971553d22efa1e1bb4feaeAffected
5f5fa7ea89dc82d34ed458f4d7a8634e8e9eefce to before 5f1ef0dfcb5b7f4a91a9b0e0ba533efd9f7e2cdbAffected

LinuxLinux

5.8Affected
before 5.8Not affected
6.1.191 through 6.1.*Not affected
6.6.130 through 6.6.*Not affected
6.12.78 through 6.12.*Not affected
6.18.6 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.