PT-2026-52022 · Linux · Linux Kernel

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-53128

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the DRBD module where the drbd adm dump devices() function fails to call rcu read lock() before rcu read unlock() is invoked. This imbalance in Read-Copy-Update (RCU)—a synchronization mechanism that allows multiple readers to access data while it is being updated—was identified by the Clang thread-safety analyzer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-53128

Affected Products

Linux Kernel

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-53128 · Security Note
• https://git.kernel.org/stable/c/68ebb9183ac3621b96b18e046841eadb9508783c · Note
• https://git.kernel.org/stable/c/1f112240531f0a0b437b2e001c1d89e8b25a8328 · Note
• https://git.kernel.org/stable/c/282e06e6d494a7bee85af78c747527b7d4009cc3 · Note
• https://git.kernel.org/stable/c/996d279f2c985d771d6cfdd923e447d825726e06 · Note
• https://git.kernel.org/stable/c/8092713a10c19fa0f731b71b2853af4319ca54fd · Note
• https://git.kernel.org/stable/c/ae12bb44b392637a8321ade305c883f9ffc0daea · Note
• https://git.kernel.org/stable/c/6cd27bcb71bb73f955d104cc3a62be6f83724392 · Note
• https://git.kernel.org/stable/c/2b31e86387e60b3689339f0f0fbb4d3623d9d494 · Note
• https://twitter.com/CVEnew/status/2069845521431449950 · Twitter Post