CVE-2026-72068

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the update rlimit cpu() function where the RLIMIT CPU value is converted to nanoseconds using 32-bit multiplication on 32-bit kernels. Because both rlim new and NSEC PER SEC are treated as 32-bit values, the result is truncated for any rlim new greater than 4 seconds before being widened to u64. This causes the CPUCLOCK PROF expiry cache (nextevt) to be programmed incorrectly, leading the process CPU timer to fire prematurely for soft limits of 5 seconds or more. This issue does not affect 64-bit kernels.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.