CVE-2026-52947

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the qrtr port remove() function where the socket reference count is decremented using sock put() before the port is removed from the qrtr ports XArray and before the RCU grace period expires. This violates the RCU update paradigm, creating a race condition. A concurrent RCU reader, such as qrtr reset ports() or qrtr port lookup(), may obtain a pointer to the socket and attempt to call sock hold() on a socket whose reference count has already reached zero. This can lead to refcount saturation and a potential Use-After-Free (UAF), a condition where the system continues to use a pointer after the memory it points to has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.