Details
- Type
- Use After Free
- Impact
- Denial Of Service
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published
- 25 September 2026
- Updated
- 15 October 2026
Vendor fix
Apply the patch that takes a reference before __unhash_process() clears p->thread_pid and releases it after proc_flush_pid() completes; update to kernel version v6.19.y or later.
Patching closes this CVE. It does not tell you which of your systems run the affected version, or what else is exposed alongside them.