CVE-2026-31555
kernel: futex: Clear stale exiting pointer in futex_lock_pi() retry path
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 24, 2026
Updated · September 16, 2026
Description
A flaw was found in the Linux kernel. A local user could exploit a race condition within the futex_lock_pi() retry path. This vulnerability occurs because a stale pointer to an exiting process is not cleared, leading to a kernel warning. Successful exploitation of this flaw could result in a system crash, causing a Denial of Service (DoS).
Statement
The futex PI lock retry path could follow a stale exiting pointer; upstream clears it before retrying. Red Hat documents this as a local kernel concurrency defect with availability impact. Fixes flow through standard kernel errata.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-825 · Expired Pointer Dereference