CVE-2026-64514
kernel: userfaultfd: gate must_wait writability check on pte_present()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 25, 2026
Updated · July 29, 2026
Description
A flaw was found in the Linux kernel's userfaultfd mechanism. This vulnerability occurs when the userfaultfd_must_wait() and userfaultfd_huge_must_wait() functions incorrectly read Page Table Entries (PTEs) without proper locking during memory operations. This can lead to an undefined state if a page is being swapped or migrated, potentially causing a process to become unresponsive. The most significant consequence is a denial of service (DoS), where a user's application may freeze indefinitely.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE not specified