CVE-2026-99218

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory corruption issue exists in the coredump thread handling. The coredump finish() function releases parked threads by clearing the ->task in their core thread entry and calling wake up process() without holding a reference to the task or being inside an RCU (Read-Copy-Update) read-side critical section. RCU is a synchronization mechanism that allows multiple readers to access data while a writer updates it. If the coredump client is preempted between the store operation and the wake up process() call, the thread may exit and be freed, leading to try to wake up() accessing the pi lock in freed memory. This can result in memory corruption or a system crash during a process core dump.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.