Vulnerability in Linux
CVE-2026-23419
In the Linux kernel, the following vulnerability has been resolved: net/rds: Fix circular locking dependency in rds_tcp_tune syzbot reported a circular locking dependency in rds_tcp_tune() where sk_net_refcnt_upgrade() is called while ho…
EPSS: 0.000 (10.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 6.19.7, 6.18.17, 7.0
References
- git.kernel.org/stable/c/8babb271403378ba6836f6c8599c5313d0e2355d
- git.kernel.org/stable/c/8519e6883a942e510f33a0e634e27bcc3a844a40
- git.kernel.org/stable/c/6ce948fa54599f369ff7fe8b793a6aae4b0762b2
- git.kernel.org/stable/c/026bbaeeab9e04534ee58882b6447300629b42f6
- git.kernel.org/stable/c/6a877ececd6daa002a9a0002cd0fbca6592a9244
Frequently asked questions
- What is CVE-2026-23419?
- CVE-2026-23419 is a high-severity vulnerability in Linux. CVSS score: 7.5/10. Published 2026-04-03.
- How severe is CVE-2026-23419?
- High severity. CVSS v3 base score is 7.5 out of 10.