CVE-2026-53243
kernel: rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 25, 2026
Updated · June 26, 2026
Description
A flaw was found in the Linux kernel. An uninitialized stack variable in the rseq_exit_user_update() function can lead to an information leak. This occurs due to an indeterminate sequencing of expressions during the initialization of the rseq_ids structure, where ids.node_id is assigned using an uninitialized ids.cpu_id. A local attacker could potentially exploit this to gain sensitive kernel information.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-908 · Use of Uninitialized Resource