PULSE
FEED
← Todos os CVEs
CVE Watch23 de out. de 2026

CVE-2026-98972

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode()

CVSS

—

Sem CVSS

EPSS

0.2%

p6

KEV

—

Exploit Today

2

0-100

Publicado: 23 de out. de 2026 · Última mod.: 23 de out. de 2026

EPSS · 30d
0.2%EPSS · 30 dias0.2%
2026-10-252026-11-07
Descrição técnica

In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() After seeing the patch [1] to guard is_in_v2_mode() with RCU, it makes me realize that is_in_v2_mode() may be called in a context where a new cgroup filesystem is being rebound with stale cpuset_cgrp_subsys.root pointer. Avoid this potential UaF situation by adding a new cpuset_v2_mode flag which is set when the cpuset_v2_mode mount option is used. This flag is written into only when cpuset_bind() is being called with a stable cpuset_cgrp_subsys.root value. The is_in_v2_mode() helper is modified to read the new cpuset_v2_mode flag instead of accessing cpuset_cgrp_subsys.root directly. [1] https://lore.kernel.org/lkml/20260929084124.626693-2-arighi@nvidia.com

Referências oficiais
CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.