CVE-2026-64253
Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/07/2026
Última modificación:
24/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
kernel/fork: clear PF_BLOCK_TS in copy_process()<br />
<br />
PF_BLOCK_TS is only set in blk_time_get_ns() when current->plug is<br />
non-NULL, and blk_finish_plug() clears it via __blk_flush_plug()<br />
before NULLing the plug pointer. copy_process() breaks the<br />
invariant by inheriting PF_BLOCK_TS from the parent while resetting<br />
the child&#39;s plug to NULL.<br />
<br />
Clear PF_BLOCK_TS alongside that assignment so callers can rely on<br />
"PF_BLOCK_TS set implies current->plug != NULL" and dereference<br />
current->plug unguarded.



