CVE Database›Document archive›CVE-2026-64514

CVE-2026-64514

kernel: userfaultfd: gate must_wait writability check on pte_present()

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · July 25, 2026

Updated · July 29, 2026

Description

A flaw was found in the Linux kernel's userfaultfd mechanism. This vulnerability occurs when the userfaultfd_must_wait() and userfaultfd_huge_must_wait() functions incorrectly read Page Table Entries (PTEs) without proper locking during memory operations. This can lead to an undefined state if a page is being swapped or migrated, potentially causing a process to become unresponsive. The most significant consequence is a denial of service (DoS), where a user's application may freeze indefinitely.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE not specified