CVE-2026-23138

In the Linux kernel, the following vulnerability has been resolved: tracing: Add recursion protection in kernel stack trace recording A bug was reported about an infinite recursion caused by tracing the rcu events with the kernel stack trace trigger enabled. The stack trace code called back into RCU which then called the stack trace again. Expand the ftrace recursion protection to add a set of bits to protect events from recursion. Each bit represents the context that the event is in (normal, softirq, interrupt and NMI). Have the stack trace code use the interrupt context to protect against recursion. Note, the bug showed an issue in both the RCU code as well as the tracing stacktrace code. This only handles the tracing stack trace side of the bug. The RCU fix will be handled separately.

• https://git.kernel.org/stable/c/19e18e6dabb1bbba76d2809ca7d8ae9e1f5975fe
• https://git.kernel.org/stable/c/5b7f91acffd2c4c000971553d22efa1e1bb4feaePatch
• https://git.kernel.org/stable/c/5f1ef0dfcb5b7f4a91a9b0e0ba533efd9f7e2cdbPatch
• https://git.kernel.org/stable/c/9b03768037d91ce727effb1c5d92d2c7781bf692

Published

Feb 14, 2026

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-23132In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23133In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23134In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23135In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23136In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23137In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23139In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-2314Heap buffer overflow in Codecs in Google Chrome prior to 145…8.8
• CVE-2026-23140In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23141In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23142In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23143In the Linux kernel, the following vulnerability has been re…5.5