CVE-2026-68132
Description
A flaw was found in the Linux kernel. A deadlock can occur during the emergency thaw process of frozen block devices. This issue arises when the do_thaw_all_callback() function attempts to reacquire a lock it already holds exclusively, while also holding another mutex. This deadlock prevents further unmount, freeze, or thaw operations on the affected filesystem and block device, leading to a Denial of Service (DoS).
Statement
This vulnerability is rated as having a Low impact for Red Hat Enterprise Linux because triggering the condition requires local privileges to initiate storage freeze routines alongside an emergency thaw event. In standard enterprise environments, emergency thaw callbacks are infrequent recovery actions rather than routine operations. A deadlock occurring in this background worker prevents subsequent unfreeze, freeze, or filesystem unmounting on the impacted storage volume, resulting solely in a localized denial of service without compromising confidentiality or integrity.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
