CVE-2026-23177

An infinite loop vulnerability was found in the Linux kernel's shmem (shared memory) truncate handling. When truncating a large swap entry where the index points to the middle of the entry, the code can enter an infinite loop repeatedly finding and failing to free the same entry, causing a system hang.

This affects systems using tmpfs/shmem with large folios and swap. A local user can trigger the infinite loop by performing truncate operations on shmem files with specific swap entry alignments. The result is denial of service but no privilege escalation or data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.