CVE-2026-98163

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the cgroup subsystem when iterating through the dying tasks list. The issue occurs because the iterator may attempt to access tasks whose usage count has dropped to zero before they are fully freed from memory. This happens between css task iter next() invocations when the css set lock is released, potentially leading to a use-after-free scenario where the system attempts to use a task struct that has already been freed. The vulnerability is specifically linked to the css task iter next() function and the css task iter advance() loop.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.