CVE-2026-23053

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

NFS: Fix a deadlock involving nfs_release_folio()

Wang Zhaolong reports a deadlock involving NFSv4.1 state recovery waiting on kthreadd, which is attempting to reclaim memory by calling nfs_release_folio(). The latter cannot make progress due to state recovery being needed.

It seems that the only safe thing to do here is to kick off a writeback of the folio, without waiting for completion, or else kicking off an asynchronous commit.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 96780ca55e3cbf4f150fd5a833a61492c9947b5b, < a4810f8beb0122f032f10735f98d257aa6064f4c; >= 96780ca55e3cbf4f150fd5a833a61492c9947b5b, < 49d352bc263fe4a834233338bfaad31b3109addf; >= 96780ca55e3cbf4f150fd5a833a61492c9947b5b, < 19b4d9ab5e77843eac0429c019470c02f8710b55; >= 96780ca55e3cbf4f150fd5a833a61492c9947b5b, < cce0be6eb4971456b703aaeafd571650d314bcca
LinuxLinux6.3

References

Timeline

Published
Feb 4, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-23054In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming without RX indirection CVE-2026-23055In the Linux kernel, the following vulnerability has been resolved: i2c: riic: Move suspend handling to NOIRQ phase Commit 53326135d0e0 ("CVE-2026-23056In the Linux kernel, the following vulnerability has been resolved: uacce: implement mremap in uacce_vm_ops to return -EPERM The current uCVE-2026-23057In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Coalesce only linear skb vsock/virtio common tries to coCVE-2026-23058In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Fix siCVE-2026-23059In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Sanitize payload size to prevent member overflow In qlaCVE-2026-23064.3The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authoriCVE-2026-230605.5In the Linux kernel, the following vulnerability has been resolved: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESNCVE-2026-230615.5In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak CVE-2026-230625.5In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro ThCVE-2026-230635.5In the Linux kernel, the following vulnerability has been resolved: uacce: ensure safe queue release with state management Directly callinCVE-2026-230645.5In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: avoid possible NULL deref tcf_ife_encode() must ma
CVE-2026-23053: Unscored | Vulnix