CVE-2026-23368

A flaw was found in the Linux kernel. An AB-BA deadlock can occur within the net: phy subsystem when registering LED triggers. This vulnerability arises because LED_TRIGGER_PHY attempts to acquire the rtnl_mutex and then triggers_list_lock, while LEDS_TRIGGER_NETDEV acquires these locks in the reverse order. This conflicting lock acquisition sequence can lead to a system hang, resulting in a Denial of Service (DoS).

This deadlock requires both LEDS_TRIGGER_NETDEV and LED_TRIGGER_PHY kernel configurations to be enabled simultaneously. The issue triggers during PHY attachment when a user concurrently writes to an LED trigger sysfs file. In practice, this is an uncommon configuration combination and requires specific timing to reproduce, limiting the practical impact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.