CVE-2026-52930

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ipc/shm component where the shm destroy orphaned() function iterates through the shm idr using shm ids(ns).rwsem, which fails to serialize all fields evaluated by shm may destroy(). Specifically, the shm nattch variable is updated while holding shm perm.lock, and attach paths can perform this update without holding the rwsem. This creates a race condition where an orphaned segment might be incorrectly identified as unused before the object lock is acquired.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.