CVE Database›Document archive›CVE-2026-31555

CVE-2026-31555

kernel: futex: Clear stale exiting pointer in futex_lock_pi() retry path

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · April 24, 2026

Updated · September 16, 2026

Description

A flaw was found in the Linux kernel. A local user could exploit a race condition within the futex_lock_pi() retry path. This vulnerability occurs because a stale pointer to an exiting process is not cleared, leading to a kernel warning. Successful exploitation of this flaw could result in a system crash, causing a Denial of Service (DoS).

Statement

The futex PI lock retry path could follow a stale exiting pointer; upstream clears it before retrying. Red Hat documents this as a local kernel concurrency defect with availability impact. Fixes flow through standard kernel errata.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-825 · Expired Pointer Dereference