PT-2026-51885 · Linux · Linux Kernel

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-52991

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists between the pressure write operation and the cgroup file release process. This occurs because the priv member of the struct kernfs open file is not sufficiently protected by the cgroup mutex during execution in the pressure write() function. If cgroup file release() completes and frees the memory associated with of->priv while pressure write() is still accessing it, a use-after-free (UAF) condition is triggered. Additionally, a separate race condition can lead to a NULL pointer dereference if of->priv is set to NULL after a live kn lock is acquired but before the cgroup mutex is obtained.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-52991

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-52991 · Security Note
• https://git.kernel.org/stable/c/03dc070fa0fc3cb4068693f468ccd5f8a7e58282 · Note
• https://twitter.com/vuldb/status/2069854625948373052 · Twitter Post
• https://git.kernel.org/stable/c/a5b98009f16d8a5fb4a8ff9a193f5735515c38fa · Note
• https://git.kernel.org/stable/c/d4352c0709bfd38c752fccbde7fd72a82ac78f23 · Note