CVE-2026-68286
kernel: drop_monitor: perform u64_stats updates under IRQ-disabled section
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · August 31, 2026
Description
A flaw was found in the Linux kernel's drop_monitor component. On 32-bit architectures, a race condition can occur during the update of 64-bit statistics. If a nested interrupt happens on the same CPU while these statistics are being updated, it can lead to the corruption of internal sequence counters or the statistical values themselves. This data corruption could potentially impact system stability or lead to inaccurate monitoring information.
Statement
This issue affects drop_monitor on 32-bit architectures. u64_stats updates after re-enabling IRQs can race with nested interrupts and corrupt counters. Primarily affects 32-bit ARM/other 32-bit arches.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-364 · Signal Handler Race Condition