CVE-2026-53166 Details
Description
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
A vulnerability in the Linux kernel's futex requeue mechanism can lead to a NULL pointer dereference, causing a kernel crash. This issue occurs when the FUTEX_CMP_REQUEUE_PI operation requeues a non-top waiter that already owns the target priority inheritance (PI) futex. In this scenario, the task_blocks_on_rt_mutex() function returns a deadlock error before the waiter's task is set, leading to a NULL dereference in the remove_waiter() function during the rt_mutex_start_proxy_lock() call. The vulnerability has been addressed by adding a self-deadlock check for non-top waiters before initiating the proxy lock, similar to the existing check for top waiters.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
No references are available for this CVE.
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
No affected product data is available for this CVE.
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 10, 2026 | CVE Rejected | kernel.org |
| Jul 10, 2026 | CVE Modified | kernel.org |
| Jul 7, 2026 | Initial Analysis | [email protected] |
| Jun 25, 2026 | New CVE Received | kernel.org |