Description

In the Linux kernel, the following vulnerability has been resolved: fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats lock_task_sighand() can trigger a hard lockup. If NR_CPUS threads call do_task_stat() at the same time and the process has NR_THREADS, it will spin with irqs disabled O(NR_CPUS * NR_THREADS) time. Change do_task_stat() to use sig->stats_lock to gather the statistics outside of ->siglock protected section, in the likely case this code will run lockless.

INFO

Published Date :

2024-04-03T14:54:48.530Z

Last Modified :

2026-01-05T10:34:14.625Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2024-26686 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
  • Rhel Aus
  • Rhel E4s
  • Rhel Eus
  • Rhel Tus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-26686.

URL Resource
https://git.kernel.org/stable/c/0c35d1914353799c54fa1843fe7dea6fcbcdbac5 cve-icon cve-icon
https://git.kernel.org/stable/c/27978243f165b44e342f28f449b91327944ea071 cve-icon cve-icon
https://git.kernel.org/stable/c/3820b0fac7732a653bcc6f6ac20c1d72e697f8f6 cve-icon cve-icon
https://git.kernel.org/stable/c/4fe85bdaabd63f8f8579b24a10ed597c9c482164 cve-icon cve-icon
https://git.kernel.org/stable/c/7601df8031fd67310af891897ef6cc0df4209305 cve-icon cve-icon
https://git.kernel.org/stable/c/cf4b8c39b9a0bd81c47afc7ef62914a62dd5ec4d cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html cve-icon
https://lore.kernel.org/linux-cve-announce/2024040335-CVE-2024-26686-b22f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-26686 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-26686 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact