PT-2026-106610 · Linux · Linux

CVE-2026-98281

·

Publicado

2026-10-06

·

Atualizado

2026-10-06

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the Linux kernel, the following vulnerability has been resolved:
futex: Also allocate private hash on vfork()
As Jann demonstrated, it is entirely feasible to access the mm through vfork(). Therefore we need to allocate a private hash on vfork() as well as any other CLONE VM user.
Specifically, it must be avoided to have (private) futex waiters before allocating the private hash.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2026-98281

Produtos afetados

Linux