{"cve":"CVE-2026-23121","nvd":{"published":"2026-02-14T15:16:07.280","modified":"2026-10-19T19:17:37.870","status":"Modified","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmISDN: annotate data-race around dev->work\n\ndev->work can re read locklessly in mISDN_read()\nand mISDN_poll(). Add READ_ONCE()/WRITE_ONCE() annotations.\n\nBUG: KCSAN: data-race in mISDN_ioctl / mISDN_read\n\nwrite to 0xffff88812d848280 of 4 bytes by task 10864 on cpu 1:\n  misdn_add_timer drivers/isdn/mISDN/timerdev.c:175 [inline]\n  mISDN_ioctl+0x2fb/0x550 drivers/isdn/mISDN/timerdev.c:233\n  vfs_ioctl fs/ioctl.c:51 [inline]\n  __do_sys_ioctl fs/ioctl.c:597 [inline]\n  __se_sys_ioctl+0xce/0x140 fs/ioctl.c:583\n  __x64_sys_ioctl+0x43/0x50 fs/ioctl.c:583\n  x64_sys_call+0x14b0/0x3000 arch/x86/include/generated/asm/syscalls_64.h:17\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nread to 0xffff88812d848280 of 4 bytes by task 10857 on cpu 0:\n  mISDN_read+0x1f2/0x470 drivers/isdn/mISDN/timerdev.c:112\n  do_loop_readv_writev fs/read_write.c:847 [inline]\n  vfs_readv+0x3fb/0x690 fs/read_write.c:1020\n  do_readv+0xe7/0x210 fs/read_write.c:1080\n  __do_sys_readv fs/read_write.c:1165 [inline]\n  __se_sys_readv fs/read_write.c:1162 [inline]\n  __x64_sys_readv+0x45/0x50 fs/read_write.c:1162\n  x64_sys_call+0x2831/0x3000 arch/x86/include/generated/asm/syscalls_64.h:20\n  do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n  do_syscall_64+0xd8/0x2c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nvalue changed: 0x00000000 -> 0x00000001","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","score":5.5},"cwes":["CWE-362"],"references":["https://git.kernel.org/stable/c/13f3b3b87068898056db4c79ee67052fbde11d43","https://git.kernel.org/stable/c/7ac345a93af31358e18e9606eb7b354691bf6757","https://git.kernel.org/stable/c/8175dbf174d487afab81e936a862a8d9b8a1ccb6","https://git.kernel.org/stable/c/aa6e33cd74ca4965f2bbcb025e0b672fb0168a69","https://git.kernel.org/stable/c/accc3f8266d2a49881dbcf78c459477f4efa0ff3"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-21T03:43:09.190223697+00:00"},"epss":{"cve":"CVE-2026-23121","score":0.0011,"percentile":0.01259,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}