CVE-2026-53243

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where an uninitialized stack variable is used within the rseq exit user update() function. This occurs because the evaluation order of expressions in an initializer list is indeterminately sequenced according to the C standard. Specifically, the compiler may evaluate cpu to node(ids.cpu id) before ids.cpu id has been initialized with task cpu(t), leading to a kernel-infoleak in rseq set ids get csaddr().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.