CVE-2026-72080

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the resctrl filesystem during unmount or failure teardown. The problem occurs because the RDT DELETED flag is not set for the statically allocated default resource group. A concurrent reader of an event file associated with this group may block on the rdtgroup mutex while the unmount process frees the file private data and destroys the kernfs node. Upon waking, the reader may dereference the already-freed file private data because it does not observe the RDT DELETED flag. This can be triggered through the rdtgroup mondata show() function. Additionally, a new resctrl mount could re-initialize the default group while waiters from a previous mount still exist, leading them to access removed mon data structures.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.