Details
- Type
- Race Condition
- Impact
- Denial Of Service, Privilege Escalation
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published
- 6 October 2026
- Updated
- 15 October 2026
Linux kernel contains a race condition in futex handling caused by missing private hash allocation on vfork(), letting attackers cause inconsistent futex state, exploit requires use of vfork() or CLONE_VM.
A CVE describes the software, not your exposure. Panop discovers whether you run the affected product, then tests whether an attacker can actually reach it.