7.8

CVE-2026-98281

futex: Also allocate private hash on vfork()

In the Linux kernel, the following vulnerability has been resolved:

futex: Also allocate private hash on vfork()

As Jann demonstrated, it is entirely feasible to access the mm through vfork().
Therefore we need to allocate a private hash on vfork() as well as any other
CLONE_VM user.

Specifically, it must be avoided to have (private) futex waiters before
allocating the private hash.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1dcd36420af2da5bd59306dba9caf78e3d248b1d
Version < 5468a4855b63b30156a79e5248e01bf1a2c18dd7
Status affected
Version ee9dce44362b2d8132c32964656ab6dff7dfbc6a
Version < eecbafa8cabbc4d1482f6a5e2acc25a8f934681b
Status affected
Version ee9dce44362b2d8132c32964656ab6dff7dfbc6a
Version < b61b6f95d6722ddbbbd09e689fa41b55fd36f9a5
Status affected
Version 974ac49a9a068b0591a59f65c63eb06579a13091
Status affected
Version 6.18.33
Version < 6.18.54
Status affected
Version 7.0.10
Version < 7.1
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.1
Status affected
Version 0
Version < 7.1
Status unaffected
Version <= 6.18.*
Version 6.18.54
Status unaffected
Version <= 7.2.*
Version 7.2.8
Status unaffected
Version <= *
Version 7.3-rc4
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.026
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/5468a4855b63b30156a79e5248e01bf1a2c18dd7
https://git.kernel.org/stable/c/eecbafa8cabbc4d1482f6a5e2acc25a8f934681b
https://git.kernel.org/stable/c/b61b6f95d6722ddbbbd09e689fa41b55fd36f9a5