Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel: Virtual crypto device can cause system freeze
UBUNTU-CVE-2026-23229
Summary
A bug in the Linux kernel's virtual crypto device can cause the system to freeze if multiple processes are running a specific benchmark test. This is fixed in a recent update. To stay secure, make sure your Linux kernel is up to date.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| canonical | linux-hwe-edge | All versions | – |
| canonical | linux-aws-5.0 | All versions | – |
| canonical | linux-aws-5.3 | All versions | – |
| canonical | linux-aws-5.4 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-5.3 | All versions | – |
| canonical | linux-azure-5.4 | All versions | – |
| canonical | linux-azure-edge | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-5.3 | All versions | – |
| canonical | linux-gcp-5.4 | All versions | – |
| canonical | linux-gke-4.15 | All versions | – |
| canonical | linux-gke-5.4 | All versions | – |
| canonical | linux-gkeop-5.4 | All versions | – |
| canonical | linux-hwe | All versions | – |
| canonical | linux-hwe-5.4 | All versions | – |
| canonical | linux-hwe-edge | All versions | – |
| canonical | linux-ibm-5.4 | All versions | – |
| canonical | linux-oem | All versions | – |
| canonical | linux-oracle-5.0 | All versions | – |
| canonical | linux-oracle-5.3 | All versions | – |
| canonical | linux-oracle-5.4 | All versions | – |
| canonical | linux-raspi-5.4 | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-5.11 | All versions | – |
| canonical | linux-aws-5.13 | All versions | – |
| canonical | linux-aws-5.15 | All versions | – |
| canonical | linux-aws-5.8 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-5.11 | All versions | – |
| canonical | linux-azure-5.13 | All versions | – |
| canonical | linux-azure-5.15 | All versions | – |
| canonical | linux-azure-5.8 | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-bluefield | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-5.11 | All versions | – |
| canonical | linux-gcp-5.13 | All versions | – |
| canonical | linux-gcp-5.15 | All versions | – |
| canonical | linux-gcp-5.8 | All versions | – |
| canonical | linux-gke | All versions | – |
| canonical | linux-gke-5.15 | All versions | – |
| canonical | linux-gkeop | All versions | – |
| canonical | linux-gkeop-5.15 | All versions | – |
| canonical | linux-hwe-5.11 | All versions | – |
| canonical | linux-hwe-5.13 | All versions | – |
| canonical | linux-hwe-5.15 | All versions | – |
| canonical | linux-hwe-5.8 | All versions | – |
| canonical | linux-ibm | All versions | – |
| canonical | linux-ibm-5.15 | All versions | – |
| canonical | linux-intel-5.13 | All versions | – |
| canonical | linux-intel-iotg-5.15 | All versions | – |
| canonical | linux-iot | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-lowlatency-hwe-5.15 | All versions | – |
| canonical | linux-nvidia-tegra-5.15 | All versions | – |
| canonical | linux-oem-5.10 | All versions | – |
| canonical | linux-oem-5.13 | All versions | – |
| canonical | linux-oem-5.14 | All versions | – |
| canonical | linux-oem-5.6 | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-5.11 | All versions | – |
| canonical | linux-oracle-5.13 | All versions | – |
| canonical | linux-oracle-5.15 | All versions | – |
| canonical | linux-oracle-5.8 | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-raspi2 | All versions | – |
| canonical | linux-riscv | All versions | – |
| canonical | linux-riscv-5.11 | All versions | – |
| canonical | linux-riscv-5.15 | All versions | – |
| canonical | linux-riscv-5.8 | All versions | – |
| canonical | linux-xilinx-zynqmp | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-allwinner-5.19 | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-5.19 | All versions | – |
| canonical | linux-aws-6.2 | All versions | – |
| canonical | linux-aws-6.5 | All versions | – |
| canonical | linux-aws-6.8 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-5.19 | All versions | – |
| canonical | linux-azure-6.2 | All versions | – |
| canonical | linux-azure-6.5 | All versions | – |
| canonical | linux-azure-6.8 | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-azure-fde-5.19 | All versions | – |
| canonical | linux-azure-fde-6.2 | All versions | – |
| canonical | linux-azure-fde-6.8 | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-5.19 | All versions | – |
| canonical | linux-gcp-6.2 | All versions | – |
| canonical | linux-gcp-6.5 | All versions | – |
| canonical | linux-gcp-6.8 | All versions | – |
| canonical | linux-gke | All versions | – |
| canonical | linux-gkeop | All versions | – |
| canonical | linux-hwe-5.19 | All versions | – |
| canonical | linux-hwe-6.2 | All versions | – |
| canonical | linux-hwe-6.5 | All versions | – |
| canonical | linux-hwe-6.8 | All versions | – |
| canonical | linux-ibm | All versions | – |
| canonical | linux-ibm-6.8 | All versions | – |
| canonical | linux-intel-iot-realtime | All versions | – |
| canonical | linux-intel-iotg | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-lowlatency | All versions | – |
| canonical | linux-lowlatency-hwe-5.19 | All versions | – |
| canonical | linux-lowlatency-hwe-6.2 | All versions | – |
| canonical | linux-lowlatency-hwe-6.5 | All versions | – |
| canonical | linux-lowlatency-hwe-6.8 | All versions | – |
| canonical | linux-nvidia | All versions | – |
| canonical | linux-nvidia-6.2 | All versions | – |
| canonical | linux-nvidia-6.5 | All versions | – |
| canonical | linux-nvidia-6.8 | All versions | – |
| canonical | linux-nvidia-tegra | All versions | – |
| canonical | linux-nvidia-tegra-igx | All versions | – |
| canonical | linux-oem-5.17 | All versions | – |
| canonical | linux-oem-6.0 | All versions | – |
| canonical | linux-oem-6.1 | All versions | – |
| canonical | linux-oem-6.5 | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-6.5 | All versions | – |
| canonical | linux-oracle-6.8 | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-riscv | All versions | – |
| canonical | linux-riscv-5.19 | All versions | – |
| canonical | linux-riscv-6.5 | All versions | – |
| canonical | linux-riscv-6.8 | All versions | – |
| canonical | linux-starfive-5.19 | All versions | – |
| canonical | linux-starfive-6.2 | All versions | – |
| canonical | linux-starfive-6.5 | All versions | – |
| canonical | linux-xilinx-zynqmp | All versions | – |
| canonical | linux-bluefield | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-intel-iot-realtime | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-realtime-6.8 | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-6.14 | All versions | – |
| canonical | linux-aws-6.17 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-6.11 | All versions | – |
| canonical | linux-azure-6.14 | All versions | – |
| canonical | linux-azure-6.17 | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-azure-fde-6.14 | All versions | – |
| canonical | linux-azure-fde-6.17 | All versions | – |
| canonical | linux-azure-nvidia | All versions | – |
| canonical | linux-azure-nvidia-6.14 | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-6.11 | All versions | – |
| canonical | linux-gcp-6.14 | All versions | – |
| canonical | linux-gcp-6.17 | All versions | – |
| canonical | linux-gke | All versions | – |
| canonical | linux-gkeop | All versions | – |
| canonical | linux-hwe-6.11 | All versions | – |
| canonical | linux-hwe-6.14 | All versions | – |
| canonical | linux-hwe-6.17 | All versions | – |
| canonical | linux-ibm | All versions | – |
| canonical | linux-lowlatency | All versions | – |
| canonical | linux-lowlatency-hwe-6.11 | All versions | – |
| canonical | linux-nvidia | All versions | – |
| canonical | linux-nvidia-6.11 | All versions | – |
| canonical | linux-nvidia-lowlatency | All versions | – |
| canonical | linux-nvidia-tegra | All versions | – |
| canonical | linux-oem-6.11 | All versions | – |
| canonical | linux-oem-6.14 | All versions | – |
| canonical | linux-oem-6.17 | All versions | – |
| canonical | linux-oem-6.8 | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-6.14 | All versions | – |
| canonical | linux-oracle-6.17 | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-raspi-realtime | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-riscv | All versions | – |
| canonical | linux-riscv-6.14 | All versions | – |
| canonical | linux-riscv-6.17 | All versions | – |
| canonical | linux-xilinx | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-raspi-realtime | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-realtime-6.14 | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-riscv | All versions | – |
Original title
In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin ...
Original description
In the Linux kernel, the following vulnerability has been resolved: crypto: virtio - Add spinlock protection with virtqueue notification When VM boots with one virtio-crypto PCI device and builtin backend, run openssl benchmark command with multiple processes, such as openssl speed -evp aes-128-cbc -engine afalg -seconds 10 -multi 32 openssl processes will hangup and there is error reported like this: virtio_crypto virtio0: dataq.0:id 3 is not a head! It seems that the data virtqueue need protection when it is handled for virtio done notification. If the spinlock protection is added in virtcrypto_done_task(), openssl benchmark with multiple processes works well.
- https://ubuntu.com/security/CVE-2026-23229 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-23229 Third Party Advisory
- https://git.kernel.org/stable/c/49c57c6c108931a914ed94e3c0ddb974008260a3 Third Party Advisory
- https://git.kernel.org/stable/c/c0a0ded3bb7fd45f720faa48449a930153257d3a Third Party Advisory
- https://git.kernel.org/stable/c/d6f0d586808689963e58fd739bed626ff5013b24 Third Party Advisory
- https://git.kernel.org/stable/c/e69a7b0a71b6561b3b6459f1fded8d589f2e8ac2 Third Party Advisory
Published: 18 Feb 2026 · Updated: 13 Mar 2026 · First seen: 9 Mar 2026