CVE-2026-93261

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the lock set class() function. This occurs because register lock class() can return NULL if the lock class pool is exhausted, graph lock() fails, or key validation fails. The lock set class() function uses this return value in pointer arithmetic without a NULL check, which corrupts hlock->class idx. Consequently, a subsequent call to reacquire held locks() invokes hlock class() with the corrupted index, resulting in a NULL or out-of-bounds pointer dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.