https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:16:14 +0000 https://cve.radiocsirt.org/vuln/cve-2026-80776 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>futex: Fix race in futex_pivot_pending() during private hash resize</p> <p>A task performing a custom private hash resize can remain blocked in uninterruptible sleep indefinitely. The hung-task detector reports:</p> <p>INFO: task futex-resizer:314 blocked for more than 10 seconds. task:futex-resizer state:D stack:14824 pid:314 tgid:312 ppid:311</p> <p>Call Trace: __schedule+0x521/0xf30 schedule+0x22/0xa0 futex_hash_allocate+0x3db/0x490 __do_sys_prctl+0x6f5/0xbd0 do_syscall_64+0xf9/0x530 entry_SYSCALL_64_after_hwframe+0x77/0x7f</p> <p>Kernel panic - not syncing: hung_task: blocked tasks</p> <p>futex_pivot_pending() allows the resize request to continue when either no replacement hash is pending (hash_new == NULL) or the current hash reference count has reached zero.</p> <p>After the final-reference wake, another futex task can complete the pivot between the two observations:</p> <p>T1 T2</p> <p>futex_hash_allocate() wait_var_event(mm, ...) futex_pivot_pending(mm) hash_new != NULL futex_hash() futex_ref_get(old) -&gt; false futex_pivot_hash(mm) hash_new = NULL __futex_pivot_hash(mm, new) rcu_assign_pointer(hash, new) fph = rcu_de…</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>futex: Fix race in futex_pivot_pending() during private hash resize</p> <p>A task performing a custom private hash resize can remain blocked in uninterruptible sleep indefinitely. The hung-task detector reports:</p> <p>INFO: task futex-resizer:314 blocked for more than 10 seconds. task:futex-resizer state:D stack:14824 pid:314 tgid:312 ppid:311</p> <p>Call Trace: __schedule+0x521/0xf30 schedule+0x22/0xa0 futex_hash_allocate+0x3db/0x490 __do_sys_prctl+0x6f5/0xbd0 do_syscall_64+0xf9/0x530 entry_SYSCALL_64_after_hwframe+0x77/0x7f</p> <p>Kernel panic - not syncing: hung_task: blocked tasks</p> <p>futex_pivot_pending() allows the resize request to continue when either no replacement hash is pending (hash_new == NULL) or the current hash reference count has reached zero.</p> <p>After the final-reference wake, another futex task can complete the pivot between the two observations:</p> <p>T1 T2</p> <p>futex_hash_allocate() wait_var_event(mm, ...) futex_pivot_pending(mm) hash_new != NULL futex_hash() futex_ref_get(old) -&gt; false futex_pivot_hash(mm) hash_new = NULL __futex_pivot_hash(mm, new) rcu_assign_pointer(hash, new) fph = rcu_de…</p> https://cve.radiocsirt.org/vuln/cve-2026-80776