PT-2026-44310 · Linux · Linux Kernel

CVE-2026-46187

·

Published

2026-05-28

·

Updated

2026-07-24

CVSS v3.1

4.7

Medium

VectorAV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A Use-After-Free (UAF) occurs in the RSI driver when there is a race condition between the self-exit operation kthread complete and exit() and the external-stop operation kthread stop(). This happens in rare instances where kthread complete and exit() is executed first, causing the kthread object to be freed before kthread stop() attempts to access it.
Recommendations Remove the kthread stop() call and modify the code to wait until the self-exit operation is completed.

Exploit

Fix

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-46187
ECHO-2441-678C-5F7A
OESA-2026-2580
OPENSUSE-SU-2026:10954-1
SUSE-SU-2026:3130-1
SUSE-SU-2026:3166-1
USN-8566-1
USN-8567-1
USN-8568-1
USN-8569-1
USN-8574-1
USN-8574-2
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8593-1
USN-8595-1
USN-8595-2
USN-8596-1
USN-8597-1
USN-8603-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8610-1

Affected Products

Linux Kernel