CVE-2026-98281 Linux Kernel - Race Condition

Linux kernel contains a race condition in futex handling caused by missing private hash allocation on vfork(), letting attackers cause inconsistent futex state, exploit requires use of vfork() or CLONE_VM.

CVSS base score 7.8 /10
High
CISA KEV
Not listed
Public exploit
None known
Authentication
Required
EPSS
0.14% chance of exploitation in 30 days
View the NVD record ↗