CVE-2026-23138

A flaw was found in the Linux kernel's tracing subsystem. When tracing RCU events with the kernel stack trace trigger enabled, an infinite recursion can occur because the stack trace recording code calls back into RCU, which then triggers another stack trace. This leads to a stack overflow and kernel crash.

Triggering this vulnerability requires the ability to configure kernel tracing with specific event triggers, which typically requires root or CAP_SYS_ADMIN privileges. The fix adds recursion protection bits to prevent re-entry into the stack trace code from the same context.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.