CVE-2026-64253

A flaw was found in the Linux kernel. The copy_process() function, responsible for creating new processes, incorrectly inherits a flag (PF_BLOCK_TS) from the parent process while simultaneously setting a related pointer (current->plug) to null in the child process. This inconsistency can lead to the kernel attempting to access a null pointer without proper validation. A local attacker could potentially exploit this to trigger a system crash, leading to a Denial of Service (DoS).

This vulnerability is rated as Moderate impact because successful exploitation requires local execution privileges and is restricted to causing a denial of service via a kernel panic, without compromising system integrity or confidentiality. On Red Hat Enterprise Linux systems, an authenticated local user capable of spawning processes under specific I/O conditions could trigger an invalid pointer dereference within process cloning routines. The flaw cannot be exploited remotely and does not enable privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.