CVE-2026-23179

nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()

State
Published
Severity
Not scored
Published
Feb 14, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()

When the socket is closed while in TCP_LISTEN a callback is run to flush all outstanding packets, which in turns calls nvmet_tcp_listen_data_ready() with the sk_callback_lock held. So we need to check if we are in TCP_LISTEN before attempting to get the sk_callback_lock() to avoid a deadlock.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 675b453e024154dd547921c6e6d5b58747ba7e0e to before 6e0c7503a5803d568d56a9f9bca662cd94a14908Affected
  • 675b453e024154dd547921c6e6d5b58747ba7e0e to before 1c90f930e7b410dd2d75a2a19a85e19c64e98ad5Affected
  • 675b453e024154dd547921c6e6d5b58747ba7e0e to before 2fa8961d3a6a1c2395d8d560ffed2c782681badeAffected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.12.70 through 6.12.*Not affected
  • 6.18.10 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.