CVE-2026-52973
Gravedad CVSS v3.1:
ALTA
Tipo:
CWE-416
Utilización después de liberación
Fecha de publicación:
24/06/2026
Última modificación:
29/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
futex: Drop CLONE_THREAD requirement for private default hash alloc<br />
<br />
Currently need_futex_hash_allocate_default() depends on strict pthread<br />
semantics, abusing CLONE_THREAD. This breaks the non-concurrency<br />
assumptions when doing the mm->futex_ref pcpu allocations, leading to<br />
bugs[0] when sharing the mm in other ways; ie:<br />
<br />
BUG: KASAN: slab-use-after-free in futex_hash_put<br />
<br />
... where the +1 bias can end up on a percpu counter that mm->futex_ref<br />
no longer points at.<br />
<br />
Loosen the check to cover any CLONE_VM clone, except vfork(). Excluding<br />
vfork keeps the existing paths untouched (no overhead), and we can&#39;t<br />
race in the first place: either the parent is suspended and the child<br />
runs alone, or mm->futex_ref is already allocated from an earlier<br />
CLONE_VM.
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.17.1 (incluyendo) | 6.18.33 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 7.0.10 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:6.17:-:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.17:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.17:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.17:rc7:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página
Referencias a soluciones, herramientas e información
- https://git.kernel.org/stable/c/1dcd36420af2da5bd59306dba9caf78e3d248b1d
- https://git.kernel.org/stable/c/974ac49a9a068b0591a59f65c63eb06579a13091
- https://git.kernel.org/stable/c/ee9dce44362b2d8132c32964656ab6dff7dfbc6a
- https://access.redhat.com/errata/RHSA-2026:45114
- https://access.redhat.com/errata/RHSA-2026:47040
- https://access.redhat.com/security/cve/CVE-2026-52973
- https://bugzilla.redhat.com/show_bug.cgi?id=2492413
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52973.json



