CVE-2026-46259

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-46259
In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading real_parent in do_task_stat() When reading /proc/[pid]/stat, do_task_stat() accesses task->real_parent without proper RCU protection, which leads to: cpu 0 cpu 1 ----- ----- do_task_stat var = task->real_parent release_task call_rcu(delayed_put_task_struct) task_tgid_nr_ns(var) rcu_read_lock <--- Too late to protect task->real_parent! task_pid_ptr <--- UAF! rcu_read_unlock This patch uses task_ppid_nr_ns() instead of task_tgid_nr_ns() to add proper RCU protection for accessing task->real_parent.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0e64bd46a04a4fd61279aca9f53a664e9e5f7e7e Patch
https://git.kernel.org/stable/c/1c8dc5b5517546c68ffae40b948336122bb61306 Patch
https://git.kernel.org/stable/c/4f9ae386861e280b7631ca252f798d25575627ee Patch
https://git.kernel.org/stable/c/73ec7c96601d61d52310c659145bb06d933a0fa6 Patch
https://git.kernel.org/stable/c/76149d53502cf17ef3ae454ff384551236fba867 Patch
https://git.kernel.org/stable/c/c93a33f28f915d446eea6fb3f0e1def0b3af1982 Patch
https://git.kernel.org/stable/c/dd8b13cb4ff1a4545a214ed897fdf2bc341155b6 Patch
https://git.kernel.org/stable/c/fefa0fcd78be465b7ad4c497fa6ec90d64194c04 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

09 Jun 2026, 20:09

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/0e64bd46a04a4fd61279aca9f53a664e9e5f7e7e - () https://git.kernel.org/stable/c/0e64bd46a04a4fd61279aca9f53a664e9e5f7e7e - Patch
References () https://git.kernel.org/stable/c/1c8dc5b5517546c68ffae40b948336122bb61306 - () https://git.kernel.org/stable/c/1c8dc5b5517546c68ffae40b948336122bb61306 - Patch
References () https://git.kernel.org/stable/c/4f9ae386861e280b7631ca252f798d25575627ee - () https://git.kernel.org/stable/c/4f9ae386861e280b7631ca252f798d25575627ee - Patch
References () https://git.kernel.org/stable/c/73ec7c96601d61d52310c659145bb06d933a0fa6 - () https://git.kernel.org/stable/c/73ec7c96601d61d52310c659145bb06d933a0fa6 - Patch
References () https://git.kernel.org/stable/c/76149d53502cf17ef3ae454ff384551236fba867 - () https://git.kernel.org/stable/c/76149d53502cf17ef3ae454ff384551236fba867 - Patch
References () https://git.kernel.org/stable/c/c93a33f28f915d446eea6fb3f0e1def0b3af1982 - () https://git.kernel.org/stable/c/c93a33f28f915d446eea6fb3f0e1def0b3af1982 - Patch
References () https://git.kernel.org/stable/c/dd8b13cb4ff1a4545a214ed897fdf2bc341155b6 - () https://git.kernel.org/stable/c/dd8b13cb4ff1a4545a214ed897fdf2bc341155b6 - Patch
References () https://git.kernel.org/stable/c/fefa0fcd78be465b7ad4c497fa6ec90d64194c04 - () https://git.kernel.org/stable/c/fefa0fcd78be465b7ad4c497fa6ec90d64194c04 - Patch
First Time Linux linux Kernel
Linux
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

05 Jun 2026, 07:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

03 Jun 2026, 18:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-06-03 18:16

Updated : 2026-06-09 20:09

NVD link : CVE-2026-46259

Mitre link : CVE-2026-46259

CVE.ORG link : CVE-2026-46259

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo