CVE-2026-23217riscv: trace: fix snapshot deadlock with sbi ecall
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: riscv: trace: fix snapshot deadlock with sbi ecall If sbi_ecall.c's functions are traceable, echo "__sbi_ecall:snapshot" > /sys/kernel/tracing/set_ftrace_filter may get the kernel into a deadlock. (Functions in sbi_ecall.c are excluded from tracing if CONFIG_RISCV_ALTERNATIVE_EARLY is set.) __sbi_ecall triggers a snapshot of the ringbuffer. The snapshot code raises an IPI interrupt, which results in another call to __sbi_ecall and another snapshot... All it takes to get into this endless loop is one initial __sbi_ecall. On RISC-V systems without SSTC extension, the clock events in timer-riscv.c issue periodic sbi ecalls, making the problem easy to trigger. Always exclude the sbi_ecall.c functions from tracing to fix the potential deadlock. sbi ecalls can easiliy be logged via trace events, excluding ecall functions from function tracing is not a big limitation.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Modified
- Record last updated
- Oct 21, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1ff95eb2bebda50c4c5406caaf201e0fcb24cc8f before f8b8ec0ddde74066d4452a7a961da544f193e00f; from 1ff95eb2bebda50c4c5406caaf201e0fcb24cc8f before b1f8285bc8e3508c1fde23b5205f1270215d4984; from 1ff95eb2bebda50c4c5406caaf201e0fcb24cc8f before b0d7f5f0c9f05f1b6d4ee7110f15bef9c11f9df0; 82f134ddd4f5da11c277bd1aa02e2a733179725a; from 6.10.10 before 6.11 | CNA record |
linux linux_kernel linux:linux_kernel | from 6.10.10 before 6.11; from 6.11.1 before 6.18.10; 6.11; 6.11; 6.19; 6.19; 6.19; 6.19 | NVD |
References
- https://git.kernel.org/stable/c/f8b8ec0ddde74066d4452a7a961da544f193e00f
- https://git.kernel.org/stable/c/b1f8285bc8e3508c1fde23b5205f1270215d4984patch
- https://git.kernel.org/stable/c/b0d7f5f0c9f05f1b6d4ee7110f15bef9c11f9df0patch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.