Files
Centos-kernel-stream-10/kernel/locking
Alexandra Hájková 8ef46edb6c Merge: [Exploits (KEV)] CVE-2026-53166 kernel: futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-10/-/merge_requests/2902

JIRA: https://redhat.atlassian.net/browse/RHEL-193249
CVE: CVE-2026-53166
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-10/-/merge_requests/2902

The CVE references commit 74e144274af3 ("futex/requeue: Prevent
NULL pointer dereference in remove_waiter() on self-deadlock"), but
it was reverted upstream and commit 40a25d59e85b ("locking/rtmutex:
Skip remove_waiter() when waiter is not enqueued") is regarded as the
proper fix for the same problem. So all of them are included in this
MR for completeness.

Signed-off-by: Waiman Long <longman@redhat.com>

Approved-by: Jay Shin <jaeshin@redhat.com>
Approved-by: Phil Auld <pauld@redhat.com>
Approved-by: Oleg Nesterov <oleg@redhat.com>
Approved-by: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com>

Merged-by: Alexandra Hájková <ahajkova@redhat.com>
2026-07-14 19:41:11 +02:00
..