PT-2026-52259 · Linux · Linux Kernel

Syzbot · CVE-2026-53163 · Published 2026-06-25 · Updated 2026-07-18

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A null-pointer dereference occurs in the remove waiter() function when triggered via FUTEX CMP REQUEUE PI. This happens because task blocks on rt mutex() does not arm the waiter during deadlock detection, resulting in waiter->task being nil. Additionally, rt mutex start proxy lock() incorrectly calls remove waiter() after successfully grabbing the rtmutex.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-53163

ECHO-C874-54BA-7235

Affected Products

Linux Kernel

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53163.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2026-53163 · Vendor Advisory
• https://git.kernel.org/stable/c/40a25d59e85b3c8709ac2424d44f65610467871e · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-53163 · Vendor Advisory
• https://git.kernel.org/stable/c/6707d7e0b71748cb3cd95bad81dae5fe1b3c8f48 · Patch
• https://git.kernel.org/stable/c/5799f9bd7fee40370b93ab1ddf001cdc7017c14d · Patch
• https://ubuntu.com/security/CVE-2026-53163 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-53163 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53163 · Security Note
• https://git.kernel.org/stable/c/4afda3a1da02129568a3a2f1898aa13e6763bcba · Patch
• https://osv.dev/vulnerability/CVE-2026-53163 · Vendor Advisory
• https://git.kernel.org/stable/c/55363fa0a04524d11efeaadee734d2db1756ed27 · Patch
• https://cve.org/CVERecord?id=CVE-2026-53163 · Security Note
• https://git.kernel.org/stable/c/a388e3dfaf9538a680de5ed43a8ebb5dd45b6e53 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2026-53163 · Vendor Advisory