CVE-2026-98163
kernel: cgroup: Avoid iteration of dying tasks with zero refcount
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 26, 2026
Updated · October 7, 2026
Description
A flaw was found in the Linux kernel's control group (cgroup) subsystem. A local user can cause a Denial of Service (DoS) or potentially achieve privilege escalation by triggering a race condition when reading cgroup process listings while tasks are terminating. Due to improper handling of dying tasks during iteration, the kernel can reference an object whose usage counter has reached zero, resulting in a use-after-free memory flaw.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-366 · Race Condition within a Thread