CVE-2026-80758

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the futex private hash put() function. The function drops the reference to fph before evaluating fph->mm for wake up var(). Because futex ref put() enables preemption before returning, a task may be preempted after dropping the final reference. This allows another task to pivot to a replacement hash and free the old hash after an RCU (Read-Copy-Update) grace period. Consequently, the first task reads fph->mm from a freed memory allocation upon resuming. KASAN (Kernel Address Sanitizer) reports this as a slab-use-after-free in futex private hash put() involving a kmalloc-512 allocation, with allocation and free stacks pointing to futex hash allocate() and the RCU free path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.