In the Linux kernel, the following vulnerability has been resolved:
futex: Drop CLONE_THREAD requirement for private default hash alloc
Currently need_futex_hash_allocate_default() depends on strict pthread semantics, abusing CLONE_THREAD. This breaks the non-concurrency assumptions when doing the mm->futex_ref pcpu allocations, leading to bugs[0] when sharing the mm in other ways; ie:
BUG: KASAN: slab-use-after-free in futex_hash_put
... where the +1 bias can end up on a percpu counter that mm->futex_ref no longer points at.
Loosen the check to cover any CLONE_VM clone, except vfork(). Excluding vfork keeps the existing paths untouched (no overhead), and we can't race in the first place: either the parent is suspended and the child runs alone, or mm->futex_ref is already allocated from an earlier CLONE_VM.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-64k-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-extraUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade libperfUpgrade kernel-rt-64k-modulesUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-rt-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-develUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-rt-64k-debugUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-devel | Aug 2, 2026 | Jul 28, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.18-debuginfoUpgrade kernel6.18-headersUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-modules-extraUpgrade kernel6.18-debuginfo-common-x86_64Upgrade perf6.18-debuginfoUpgrade kernel-livepatch-6.18.33-63.124Upgrade kernel6.18-develUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-toolsUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18Upgrade python3-perf6.18Upgrade perf6.18Upgrade bpftool6.18Upgrade kernel6.18-modules-extra-common | Jul 8, 2026 | Jun 24, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 17, 2026 | Jun 24, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rtUpgrade libperf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade rvUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-core | Jul 29, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-28-realtimeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-nvidia-bos-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-oem-24.04cUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-7.0.0-1008-gcp-64kUpgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-7.0.0-1003-gkeUpgrade linux-image-7.0.0-1009-oemUpgrade linux-image-azure-fde-7.0Upgrade linux-image-oem-24.04aUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-gkeUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-oem-24.04dUpgrade linux-image-aws-64kUpgrade linux-image-virtual-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-azure-7.0Upgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-28-realtime-64kUpgrade linux-image-awsUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1003-gke-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidia-bos-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-nvidia-bosUpgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-26.04Upgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-gke-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-oracle-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-oem-26.04aUpgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-gke-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-28-genericUpgrade linux-image-gke-64kUpgrade linux-image-genericUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-azureUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1008-gcpUpgrade linux-image-ibm | Jul 20, 2026 | Jun 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub