CVE-2026-23419: 
Linux Kernel vulnerability analysis and mitigation

CVE-2026-23419 is a circular locking dependency vulnerability in the Linux kernel's RDS (Reliable Datagram Sockets) TCP subsystem, specifically within the rds_tcp_tune() function. The flaw was disclosed on April 3, 2026, and affects Linux kernel versions 5.17.7 through 6.6.129, 6.7 through 6.12.76, 6.13 through 6.18.16, and 6.19 through 6.19.6, as well as pre-release 7.0 release candidates up to rc7. It carries a CVSS v3.1 base score of 5.5 (Medium) (Red Hat Advisory, GitHub Advisory).

The root cause is improper locking (CWE-667) leading to a deadlock condition (CWE-833) in the net/rds subsystem. When rds_tcp_tune() calls sk_net_refcnt_upgrade() while holding the socket lock (sk_lock-AF_INET6), the function internally performs memory allocation via get_net_track() → ref_tracker_alloc(), which attempts to acquire the fs_reclaim lock — creating a circular dependency detected by the kernel's lockdep subsystem. The fix moves sk_net_refcnt_upgrade() outside the socket lock critical section, which is safe because the fields it modifies (sk_net_refcnt, ns_tracker) are not accessed concurrently at that point (Red Hat Advisory, GitHub Advisory).

Successful exploitation allows a local attacker with low-level privileges to trigger a kernel deadlock in the rds_tcp_tune() code path, rendering the affected system unresponsive and causing a denial of service (DoS). There is no impact on confidentiality or integrity — the vulnerability is limited to availability. Systems relying on RDS over TCP and requiring high availability are most at risk (Red Hat Advisory).

• Logs: Kernel log entries (dmesg or /var/log/kern.log) containing WARNING: possible circular locking dependency detected referencing rds_tcp_tune and locks k-sk_lock-AF_INET6 and fs_reclaim.
• Process: Kernel worker threads (e.g., kworker/u*) appearing hung or in an uninterruptible sleep state related to RDS TCP operations.
• System Behavior: System becoming unresponsive or experiencing a kernel panic/hang, particularly on hosts actively using RDS over TCP.

Apply the available kernel patches immediately. Fixed versions include: 5.18 (final), 6.6.130 and later, 6.12.77 and later, 6.18.17 and later, 6.19.7 and later, and 7.0-rc3 and later. As an interim workaround, consider disabling RDS TCP functionality if it is not required by the workload. Monitor kernel logs for deadlock warnings related to rds_tcp_tune() as an indicator of potential exploitation attempts. Distribution-specific updates are available from Red Hat, SUSE (SUSE-SU-2026:2217-1, SUSE-SU-2026:2238-1), openSUSE, and Amazon Linux 2023 (Red Hat Advisory, SUSE Advisory).

The vulnerability was initially reported to the kernel community via syzbot, Google's automated kernel fuzzing infrastructure, which identified the circular locking dependency. Red Hat and SUSE both issued security advisories and updated packages promptly following disclosure. No significant broader media coverage or notable researcher commentary beyond standard vendor advisory channels has been observed for this medium-severity kernel bug (Red Hat Advisory, SUSE Advisory).