CVE-2026-64253
- Source
- https://cve.org/CVERecord?id=CVE-2026-64253
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64253.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64253
- Downstream
- Published
- 2026-07-24T15:31:21.378Z
- Modified
- 2026-07-27T04:03:19.294641390Z
- Summary
- kernel/fork: clear PF_BLOCK_TS in copy_process()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
kernel/fork: clear PFBLOCKTS in copy_process()
PFBLOCKTS is only set in blktimegetns() when current->plug is non-NULL, and blkfinish_plug() clears it via _blkflushplug() before NULLing the plug pointer. copyprocess() breaks the invariant by inheriting PFBLOCKTS from the parent while resetting the child's plug to NULL.
Clear PFBLOCKTS alongside that assignment so callers can rely on "PFBLOCKTS set implies current->plug != NULL" and dereference current->plug unguarded.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64253.json" }- References
-
- https://git.kernel.org/stable/c/77bba61a20f1b3d206f4f90e10a7bb3cd90b9619
- https://git.kernel.org/stable/c/99e6c712cc300883b8cbf03347d5359ec1a4d6dd
- https://git.kernel.org/stable/c/ee0801aceabdf583392477baf69a290b09448b8f
- https://git.kernel.org/stable/c/fd38b75c4b43295b10d69772a46d1c74dbd6fc81
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64253.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64253
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced06b23f92af87a84d70881b2ecaa72e00f7838264Fixedee0801aceabdf583392477baf69a290b09448b8fFixed99e6c712cc300883b8cbf03347d5359ec1a4d6ddFixed77bba61a20f1b3d206f4f90e10a7bb3cd90b9619Fixedfd38b75c4b43295b10d69772a46d1c74dbd6fc81