CVE Database›Document archive›CVE-2026-68286

CVE-2026-68286

kernel: drop_monitor: perform u64_stats updates under IRQ-disabled section

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 10, 2026

Updated · August 31, 2026

Description

A flaw was found in the Linux kernel's drop_monitor component. On 32-bit architectures, a race condition can occur during the update of 64-bit statistics. If a nested interrupt happens on the same CPU while these statistics are being updated, it can lead to the corruption of internal sequence counters or the statistical values themselves. This data corruption could potentially impact system stability or lead to inaccurate monitoring information.

Statement

This issue affects drop_monitor on 32-bit architectures. u64_stats updates after re-enabling IRQs can race with nested interrupts and corrupt counters. Primarily affects 32-bit ARM/other 32-bit arches.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-364 · Signal Handler Race Condition