HomeDefectsLIN1023-34305
Fixed

LIN1023-34305 : Security Advisory - linux - CVE-2026-98281

Created: Oct 6, 2026    Updated: Oct 8, 2026
Resolved Date: Oct 7, 2026
Found In Version: 10.23.30.2
Fix Version: 10.23.30.8
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  futex: Also allocate private hash on vfork()  As Jann demonstrated, it is entirely feasible to access the mm through vfork(). Therefore we need to allocate a private hash on vfork() as well as any other CLONE_VM user.  Specifically, it must be avoided to have (private) futex waiters before allocating the private hash.
Data source: kernel.org (416baaa9-dc9f-4396-8d5f-8c081fb06d67)