CVE-2026-72069

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where the rt spin unlock() function releases RCU (Read-Copy-Update) protection before the lock is actually unlocked. This behavior differs from regular spinlocks, which maintain preemption disablement across the unlock operation to ensure full RCU protection. This discrepancy can lead to a Use-After-Free (UAF) scenario, where memory is freed while still being accessed by another thread. The same issue affects the rwlock substitution. The flaw occurs because the rcu read unlock() invocation is placed before the unlock operations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.