CVE-2026-23229
crypto: virtio - Add spinlock protection with virtqueue notification
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well.
INFO
Published Date :
Feb. 18, 2026, 4:22 p.m.
Last Modified :
March 18, 2026, 1:25 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
- Apply kernel patch for crypto: virtio.
- Ensure virtqueue handling is spinlock protected.
- Test with multiple processes under load.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-23229.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-23229 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-23229
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-23229 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-23229 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Mar. 18, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE NVD-CWE-noinfo Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 6.19.1 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.4.268 up to (excluding) 5.5 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.11 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.19.306 up to (excluding) 4.20 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.10.209 up to (excluding) 5.10.251 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.15.148 up to (excluding) 5.15.201 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.1.75 up to (excluding) 6.1.164 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.6.14 up to (excluding) 6.6.125 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7.2 up to (excluding) 6.12.72 Added Reference Type kernel.org: https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2 Types: Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 23, 2026
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/b505047ffc8057555900d2d3a005d033e6967382 -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 19, 2026
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/552475d0b6cece73a52c0fa5faa0ce45e99df74b Added Reference https://git.kernel.org/stable/c/8ee8ccfd60bf17cbdab91069d324b5302f4f3a30 Added Reference https://git.kernel.org/stable/c/c9e594194795c86ca753ad6ed64c2762e9309d0d -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 18, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well. Added Reference https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3 Added Reference https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a Added Reference https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24 Added Reference https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2