CVE-2026-46259 Details
Description
In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading real_parent in do_task_stat() When reading /proc/[pid]/stat, do_task_stat() accesses task->real_parent without proper RCU protection, which leads to: cpu 0 cpu 1 ----- ----- do_task_stat var = task->real_parent release_task call_rcu(delayed_put_task_struct) task_tgid_nr_ns(var) rcu_read_lock <--- Too late to protect task->real_parent! task_pid_ptr <--- UAF! rcu_read_unlock This patch uses task_ppid_nr_ns() instead of task_tgid_nr_ns() to add proper RCU protection for accessing task->real_parent.
A vulnerability in the Linux kernel's procfs implementation allows for a use-after-free condition. When the /proc/[pid]/stat file is read, the do_task_stat() function accesses the real_parent task field without proper Read-Copy-Update (RCU) protection. This oversight can lead to a race condition where the task structure is freed before it is safely accessed, causing a use-after-free vulnerability. The issue affects several versions of the Linux kernel.
Users can apply the available patch by updating to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version can be found in the Linux Kernel Git repository.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0e64bd46a04a4fd61279aca9f53a664e9e5f7e7e | kernel.org | Patch |
| https://git.kernel.org/stable/c/1c8dc5b5517546c68ffae40b948336122bb61306 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4f9ae386861e280b7631ca252f798d25575627ee | kernel.org | Patch |
| https://git.kernel.org/stable/c/73ec7c96601d61d52310c659145bb06d933a0fa6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/76149d53502cf17ef3ae454ff384551236fba867 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c93a33f28f915d446eea6fb3f0e1def0b3af1982 | kernel.org | Patch |
| https://git.kernel.org/stable/c/dd8b13cb4ff1a4545a214ed897fdf2bc341155b6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/fefa0fcd78be465b7ad4c497fa6ec90d64194c04 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.26, < 5.10.252 >= 5.11, < 5.15.202 >= 5.16, < 6.1.165 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.14 >= 6.19, < 6.19.4 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 9, 2026 | Initial Analysis | [email protected] |
| Jun 5, 2026 | CVE Modified | kernel.org |
| Jun 3, 2026 | New CVE Received | kernel.org |