PT-2026-44296 · Linux+3 · Linux Kernel+3
CVE-2026-46173
·
Published
2026-05-11
·
Updated
2026-09-07
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists where an exiting task that experiences an oops (a kernel panic that does not require a full system reboot) can be preempted during the execution of
do task dead(). This occurs because make task dead() calls do task dead() with preemption enabled, violating the requirement that schedule() must be called with preemption disabled. If a task is preempted after becoming TASK DEAD but before entering the scheduler, the system may repeatedly drop references to the task stack. This leads to memory corruption, specifically use-after-free or double-free conditions, potentially allowing two tasks to run on the same stack.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Multiple Releases of Same Resource or Handle
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Rocky Linux
Ubuntu