5.5

CVE-2026-23229: linux

CVSS: 5.5v3.1MediumModified
AliasesUBUNTU-CVE-2026-23229DEBIAN-CVE-2026-23229
Published 18-02-2026Last modified 02-06-2026
Open JSON

Vulnerability summary

CVE-2026-23229 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.1% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.14%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 42 · Related 36
DLA-4498-1DLA-4499-1DSA-6141-1DSA-6163-1MGASA-2026-0097MGASA-2026-0098

Timeline

  1. 18-02-2026
    PublishedVulnerability first disclosed.
  2. 02-06-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

+0.02 pp

From 0.13% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu153 products
  • linuxAll versions (No fix recorded) | < 5.15.0-186.196 | < 6.8.0-134.134
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1112.119 | < 6.8.0-1060.63
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 0eb69890e86775d178452880ea0d24384c5ccedf, < 552475d0b6cece73a52c0fa5faa0ce45e99df74b | ≥ 75cba72ddb788a5b9c7ed2139fbb84383df029eb, < 8ee8ccfd60bf17cbdab91069d324b5302f4f3a30 | ≥ ae4747dab2eab95a68bb2f6c7e904bff0424e1b1, < c9e594194795c86ca753ad6ed64c2762e9309d0d | ≥ c4c54fce9ec54a59a4ca035af13c2823c76684cc, < d6f0d586808689963e58fd739bed626ff5013b24 | ≥ fed93fb62e05c38152b0fc1dc9609639e63eed76, < c0a0ded3bb7fd45f720faa48449a930153257d3a | ≥ fed93fb62e05c38152b0fc1dc9609639e63eed76, < e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2 | ≥ fed93fb62e05c38152b0fc1dc9609639e63eed76, < 49c57c6c108931a914ed94e3c0ddb974008260a3 | ≥ fed93fb62e05c38152b0fc1dc9609639e63eed76, < b505047ffc8057555900d2d3a005d033e6967382 | 96be18c8fff9d57e29621386e2fa17268383ea27 | 830a4f073f7edd2cc4f30ba95bdc3495d97c2550 | 8862c0d2e47ba1733d9687fe0ff4e02d6e391255 | ≥ 5.10.209, < 5.10.251 | ≥ 5.15.148, < 5.15.201 | ≥ 6.1.75, < 6.1.164 | ≥ 6.6.14, < 6.6.125 | ≥ 4.19.306, < 4.20 | ≥ 5.4.268, < 5.5 | ≥ 6.7.2, < 6.8 | 6.8
  • linux_kernel≥ 4.19.306, < 4.20 | ≥ 5.4.268, < 5.5 | ≥ 5.10.209, < 5.10.251 | ≥ 5.15.148, < 5.15.201 | ≥ 6.1.75, < 6.1.164 | ≥ 6.6.14, < 6.6.125 | ≥ 6.7.2, < 6.12.72 | ≥ 6.13, < 6.18.11 | ≥ 6.19, < 6.19.1
Debian1 product
  • linux< 6.1.164-1 | < 6.12.73-1 | < 6.18.12-1

3 vendors · 156 products

References

38 links
Show all 38 references