Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23229

crypto: virtio - Add spinlock protection with virtqueue notification

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0eb69890e86775d178452880ea0d24384c5ccedf to < 552475d0b6cece73a52c0fa5faa0ce45e99df74baffected
  • 75cba72ddb788a5b9c7ed2139fbb84383df029eb to < 8ee8ccfd60bf17cbdab91069d324b5302f4f3a30affected
  • ae4747dab2eab95a68bb2f6c7e904bff0424e1b1 to < c9e594194795c86ca753ad6ed64c2762e9309d0daffected
  • c4c54fce9ec54a59a4ca035af13c2823c76684cc to < d6f0d586808689963e58fd739bed626ff5013b24affected
  • fed93fb62e05c38152b0fc1dc9609639e63eed76 to < c0a0ded3bb7fd45f720faa48449a930153257d3aaffected
  • fed93fb62e05c38152b0fc1dc9609639e63eed76 to < e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2affected
  • fed93fb62e05c38152b0fc1dc9609639e63eed76 to < 49c57c6c108931a914ed94e3c0ddb974008260a3affected
  • fed93fb62e05c38152b0fc1dc9609639e63eed76 to < b505047ffc8057555900d2d3a005d033e6967382affected
  • 96be18c8fff9d57e29621386e2fa17268383ea27affected
  • 830a4f073f7edd2cc4f30ba95bdc3495d97c2550affected
  • 8862c0d2e47ba1733d9687fe0ff4e02d6e391255affected
  • 5.10.209 to < 5.10.251affected
  • 5.15.148 to < 5.15.201affected
  • 6.1.75 to < 6.1.164affected
  • 6.6.14 to < 6.6.125affected
  • 4.19.306 to < 4.20affected
  • 5.4.268 to < 5.5affected
  • 6.7.2 to < 6.8affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 5.10.251 to ≤ 5.10.*unaffected
  • 5.15.201 to ≤ 5.15.*unaffected
  • 6.1.164 to ≤ 6.1.*unaffected
  • 6.6.125 to ≤ 6.6.*unaffected
  • 6.12.72 to ≤ 6.12.*unaffected
  • 6.18.11 to ≤ 6.18.*unaffected
  • 6.19.1 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References