Към съдържанието
Търсене

CVE-2026-99244: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper Since commit 7fea700e04bd ("zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING") zap_pid_ns_processes() clears TIF_NOTIFY_SIGNAL before every kernel_wait4() call. Otherwise kernel_wait4() doesn't sleep and returns -ERESTARTSYS if signal_pending() is true and the reaper busy-waits. But clearing TIF_NOTIFY_SIGNAL doesn't fix it. It can get raised again. For example, klp_send_signals() sets it raw against any task that hasn't transitioned yet. And it keeps sending it until the livepatch finishes. The sleep loop waiting for pid_allocated to drop has the same problem and it doesn't even clear anything. So a schedule() in TASK_INTERRUPTIBLE returns immediately. Use a no_notify_signal guard. signal_pending() will ignore TIF_NOTIFY_SIGNAL and the pid namespace reaper sleeps until a child exits or free_pid() wakes it.

    Засегнати продукти

    • Linux Linux: edd2754a62bee8d97b4808a15de024f66a1ddccf преди 2c20ace1698d03a23467351be1d281e89b36ade3; 3466abafa9f4f81a869da828e52a12f693175ec2 преди 9ab0324f4868eeb20c63f063a1e5bc01d5539212; 7fea700e04bd3f424c2d836e98425782f97b494e преди 30b274508c743f243c82904954c4e416d7143d4c; 7fea700e04bd3f424c2d836e98425782f97b494e преди 70178691c467c8f9f722765299fd8524c3121a35; 7fea700e04bd3f424c2d836e98425782f97b494e преди 3d15ac36ce174477efa5365e424dbd47950fd2b9; 7fea700e04bd3f424c2d836e98425782f97b494e преди f46cd8241d9b83f2279cc0db3e9d3e181b548a59; 7fea700e04bd3f424c2d836e98425782f97b494e преди 5c0985dd3c32fc2bbd0e8beaf13cf52cd97376a2; 82c7acf9a12c9b4e4b0aba531de82b4e39a345c8; 8e69e589f233ca2c9631f5af2b94f95dfc2ba804; 09ab5b424b17cfe633db58bb2f9edbaf9484cf20; 6.1.95 преди 6.1.191; 6.6.35 преди 6.6.161; 5.10.221 преди 5.11; 5.15.162 преди 5.16; 6.9.6 преди 6.10
    • Linux Linux: 6.10; преди 6.10; 6.1.191 до 6.1.*; 6.6.161 до 6.6.*; 6.12.115 до 6.12.*; 6.18.60 до 6.18.*; 7.2.14 до 7.2.*; 7.3.1 до 7.3.*; 7.4-rc1 до *

    История

    • 3 ноември 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-99244: Linux | freedomonline.bg