VDB
RHSA-2026:53330
RHSA-2026:53330
PUBLISHED
CVSS 5.5 MEDIUM
A flaw was found in the Linux kernel. An improper reference counting order in the filesystem notification (fsnotify) subsystem allows a local user to trigger a race condition during object cleanup. This issue leads to a use-after-free condition, where the system attempts to access memory that has already been released. A local attacker could exploit this vulnerability to cause a denial of service (DoS) by crashing the system or potentially corrupt kernel memory.
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | kernel-64k-devel-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | perf-debuginfo-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-64k-debug-modules-core-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-tools-debuginfo-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-rt-debug-devel-0:6.12.0-211.46.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-rt-64k-modules-core-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux Real Time (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-debug-debuginfo-0:6.12.0-211.46.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-rt-debug-core-0:6.12.0-211.46.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | libperf-debuginfo-0:6.12.0-211.46.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-debug-devel-0:6.12.0-211.46.1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-64k-debug-debuginfo-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-modules-extra-matched-0:6.12.0-211.46.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | libperf-debuginfo-0:6.12.0-211.46.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-64k-debuginfo-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-debuginfo-0:6.12.0-211.46.1.el10_2.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-rt-debug-modules-core-0:6.12.0-211.46.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-rt-debug-modules-0:6.12.0-211.46.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-modules-extra-0:6.12.0-211.46.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | libperf-0:6.12.0-211.46.1.el10_2.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) | 0:6.12.0-211.46.1.el10_2 |
| Red Hat | kernel-debuginfo-0:6.12.0-211.46.1.el10_2.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 10) | 0:6.12.0-211.46.1.el10_2 |
…and 289 more
Timeline
- Aug 11, 2026 CVE Published
- Oct 29, 2026 CVE Updated
- Oct 29, 2026 Distribution Patch
- Oct 29, 2026 Distribution Patch
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:53330 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2330957 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2429083 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2454320 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2460619 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2492094 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2507213 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2507402 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_53330.json advisory
- https://access.redhat.com/security/cve/CVE-2024-53143 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-53143 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-53143 advisory
- https://lore.kernel.org/linux-cve-announce/2024120746-CVE-2024-53143-05ed@gregkh/T advisory
- https://access.redhat.com/security/cve/CVE-2025-71072 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-71072 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-71072 advisory
- https://lore.kernel.org/linux-cve-announce/2026011325-CVE-2025-71072-b52b@gregkh/T advisory
- https://access.redhat.com/security/cve/CVE-2026-23415 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-23415 advisory
…and 18 more