CVE-2026-53352
kernel: signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 1, 2026
Updated · July 23, 2026
Description
A flaw was found in the Linux kernel. A race condition exists in the zap_other_threads() function where job control flags are not properly cleared for the calling thread. This can occur when a multi-threaded process receives a stop signal, and one of its threads concurrently calls execve(). The un-cleared flags can lead to an attempt to decrement an already-zero counter, triggering a kernel warning and resulting in a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-617 · Reachable Assertion