CVE Database›Document archive›CVE-2026-53243

CVE-2026-53243

kernel: rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · June 26, 2026

Description

A flaw was found in the Linux kernel. An uninitialized stack variable in the rseq_exit_user_update() function can lead to an information leak. This occurs due to an indeterminate sequencing of expressions during the initialization of the rseq_ids structure, where ids.node_id is assigned using an uninitialized ids.cpu_id. A local attacker could potentially exploit this to gain sensitive kernel information.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-908 · Use of Uninitialized Resource