Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Harry Yoo

#38184of 60,596
7.8Total CVSS
Vulnerabilities · 1
PT-2026-52258
2026-06-25
7.8
CVE-2026-53162
Linux
Linux Kernel
An issue exists in the memory control group (memcg) where the `get random u32 below()` function is called during memcg charge draining, which can occur in the Non-Maskable Interrupt (NMI) context. The `get random u32 below()` function is neither reentrant nor NMI-safe because it acquires a per-cpu local lock on the `batched entropy u32` state. If an NMI occurs while the CPU is updating the ChaCha batch state and subsequently calls the random subsystem, it can lead to state corruption. While the `memcg stock` local trylock prevents re-entry on the per-cpu stock, it does not protect the locks of unrelated subsystems.