CVE-2026-23199

A deadlock vulnerability was found in the procfs PROCMAP_QUERY ioctl handler. When fetching the optional build ID while holding the VMA lock (mmap_lock), a circular lock dependency can occur with the inode mutex, causing a system deadlock.

This deadlock can be triggered by any local user using the PROCMAP_QUERY ioctl on /proc/[pid]/maps while another process is performing file I/O. The deadlock results in denial of service but not privilege escalation or data exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.