PT-2026-51867 · Linux+3 · Linux Kernel+3
CVE-2026-52973
·
Published
2026-05-01
·
Updated
2026-09-07
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw in the futex subsystem occurs because the
need futex hash allocate default() function incorrectly relies on CLONE THREAD semantics. This dependency breaks non-concurrency assumptions during mm->futex ref per-CPU allocations when the memory management structure is shared via CLONE VM clones, excluding vfork(). This can lead to a slab-use-after-free condition in the futex hash put() function, resulting in memory corruption and potential system instability.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Rocky Linux
Ubuntu