PT-2026-51723 · Linux · Linux
Published
2026-06-24
·
Updated
2026-06-24
·
CVE-2026-52930
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
ipc/shm: serialize orphan cleanup with shm nattch updates
shm destroy orphaned() walks the shm idr under shm ids(ns).rwsem, but that
does not serialize all fields tested by shm may destroy(). In particular,
shm nattch is updated while holding shm perm.lock, and attach paths can do
that without holding the rwsem.
Do not decide that an orphaned segment is unused before taking the object
lock. Move the shm may destroy() check under shm perm.lock, matching the
other destroy paths, and unlock the segment when it no longer qualifies
for removal.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux