Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-98281

futex: Also allocate private hash on vfork()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork() As Jann demonstrated, it is entirely feasible to access the mm through vfork(). Therefore we need to allocate a private hash on vfork() as well as any other CLONE_VM user. Specifically, it must be avoided to have (private) futex waiters before allocating the private hash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1dcd36420af2da5bd59306dba9caf78e3d248b1d to < 5468a4855b63b30156a79e5248e01bf1a2c18dd7affected
  • ee9dce44362b2d8132c32964656ab6dff7dfbc6a to < eecbafa8cabbc4d1482f6a5e2acc25a8f934681baffected
  • ee9dce44362b2d8132c32964656ab6dff7dfbc6a to < b61b6f95d6722ddbbbd09e689fa41b55fd36f9a5affected
  • 974ac49a9a068b0591a59f65c63eb06579a13091affected
  • 6.18.33 to < 6.18.54affected
  • 7.0.10 to < 7.1affected

Linux Linux

Default version status: affected

  • 7.1affected
  • 0 to < 7.1unaffected
  • 6.18.54 to ≤ 6.18.*unaffected
  • 7.2.8 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References