CVE-2026-98281
Received Received - Intake

Futex Private Hash Allocation in Linux Kernel

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork() As Jann demonstrated, it is entirely feasible to access the mm through vfork(). Therefore we need to allocate a private hash on vfork() as well as any other CLONE_VM user. Specifically, it must be avoided to have (private) futex waiters before allocating the private hash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-98281
EUVD
EUVD-2026-93209

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
Linux Linux 1dcd36420af2da5bd59306dba9caf78e3d248b1d
Linux Linux ee9dce44362b2d8132c32964656ab6dff7dfbc6a
Linux Linux ee9dce44362b2d8132c32964656ab6dff7dfbc6a
Linux Linux 974ac49a9a068b0591a59f65c63eb06579a13091
Linux Linux 6.18.33
Linux Linux 7.0.10
Linux Linux 7.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
AI Quick Actions have not been generated yet.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98281. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart