Medium 5.5Published Feb 14, 2026

CVE-2026-23121mISDN: annotate data-race around dev->work

Updated under an hour ago (Oct 27, 2026, 9:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mISDN: annotate data-race around dev->work dev->work can re read locklessly in mISDN_read() and mISDN_poll(). Add READ_ONCE()/WRITE_ONCE() annotations. BUG: KCSAN: data-race in mISDN_ioctl / mISDN_read write to 0xffff88812d848280 of 4 bytes by task 10864 on cpu 1: misdn_add_timer drivers/isdn/mISDN/timerdev.c:175 [inline] mISDN_ioctl+0x2fb/0x550 drivers/isdn/mISDN/timerdev.c:233 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:597 [inline] __se_sys_ioctl+0xce/0x140 fs/ioctl.c:583 __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:583 x64_sys_call+0x14b0/0x3000 arch/x86/include/generated/asm/syscalls_64.h:17 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f read to 0xffff88812d848280 of 4 bytes by task 10857 on cpu 0: mISDN_read+0x1f2/0x470 drivers/isdn/mISDN/timerdev.c:112 do_loop_readv_writev fs/read_write.c:847 [inline] vfs_readv+0x3fb/0x690 fs/read_write.c:1020 do_readv+0xe7/0x210 fs/read_write.c:1080 __do_sys_readv fs/read_write.c:1165 [inline] __se_sys_readv fs/read_write.c:1162 [inline] __x64_sys_readv+0x45/0x50 fs/read_write.c:1162 x64_sys_call+0x2831/0x3000 arch/x86/include/generated/asm/syscalls_64.h:20 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f value changed: 0x00000000 -> 0x00000001

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-362
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1b2b03f8e514e4f68e293846ba511a948b80243c before d5d99cb9e0839093cd53aa3b28176fce2f820ca0; from 1b2b03f8e514e4f68e293846ba511a948b80243c before 13f3b3b87068898056db4c79ee67052fbde11d43; from 1b2b03f8e514e4f68e293846ba511a948b80243c before accc3f8266d2a49881dbcf78c459477f4efa0ff3; from 1b2b03f8e514e4f68e293846ba511a948b80243c before fc8ba17fd3337bd8b1913c30b95df0fee00d8fb7; from 1b2b03f8e514e4f68e293846ba511a948b80243c before aa6e33cd74ca4965f2bbcb025e0b672fb0168a69; from 1b2b03f8e514e4f68e293846ba511a948b80243c before 7ac345a93af31358e18e9606eb7b354691bf6757; from 1b2b03f8e514e4f68e293846ba511a948b80243c before 8175dbf174d487afab81e936a862a8d9b8a1ccb6	CNA record
linux linux_kernel linux:linux_kernel	from 2.6.27 before 5.10.249; from 5.11 before 5.15.199; from 5.16 before 6.1.162; from 6.2 before 6.6.122; from 6.7 before 6.12.68; from 6.13 before 6.18.8; 6.19; 6.19; and 4 more ranges	NVD

References

References

https://git.kernel.org/stable/c/d5d99cb9e0839093cd53aa3b28176fce2f820ca0	patch
https://git.kernel.org/stable/c/13f3b3b87068898056db4c79ee67052fbde11d43	patch
https://git.kernel.org/stable/c/accc3f8266d2a49881dbcf78c459477f4efa0ff3	patch
https://git.kernel.org/stable/c/fc8ba17fd3337bd8b1913c30b95df0fee00d8fb7	patch
https://git.kernel.org/stable/c/aa6e33cd74ca4965f2bbcb025e0b672fb0168a69	patch
https://git.kernel.org/stable/c/7ac345a93af31358e18e9606eb7b354691bf6757	patch
https://git.kernel.org/stable/c/8175dbf174d487afab81e936a862a8d9b8a1ccb6	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.