In the Linux kernel, the following vulnerability has been resolved:
futex: Also allocate private hash on vfork()
As Jann demonstrated, it is entirely feasible to access the mm through vfork(). Therefore we need to allocate a private hash on vfork() as well as any other CLONE_VM user.
Specifically, it must be avoided to have (private) futex waiters before allocating the private hash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Oct 13, 2026 | Oct 6, 2026 |
| Ubuntu | — | Upgrade linux-hwe-7.0Upgrade linux-awsUpgrade linux-gcpUpgrade linux-oracleUpgrade linux-riscvUpgrade linux-ibmUpgrade linux-oem-7.0Upgrade linuxUpgrade linux-riscv-7.0 | Nov 3, 2026 | Oct 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub