CVE-2026-68132
kernel: super: fix emergency thaw deadlock on frozen block devices
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel. A deadlock can occur during the emergency thaw process of frozen block devices. This issue arises when the do_thaw_all_callback() function attempts to reacquire a lock it already holds exclusively, while also holding another mutex. This deadlock prevents further unmount, freeze, or thaw operations on the affected filesystem and block device, leading to a Denial of Service (DoS).
Statement
This vulnerability is rated as having a Low impact for Red Hat Enterprise Linux because triggering the condition requires local privileges to initiate storage freeze routines alongside an emergency thaw event. In standard enterprise environments, emergency thaw callbacks are infrequent recovery actions rather than routine operations. A deadlock occurring in this background worker prevents subsequent unfreeze, freeze, or filesystem unmounting on the impacted storage volume, resulting solely in a localized denial of service without compromising confidentiality or integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-833 · Deadlock