Linux Kernel Vulnerability in cgroup Management

CVE-2026-46223

What is CVE-2026-46223?

This vulnerability in the Linux kernel relates to cgroup management, where the 'rmdir' operation could lead to a deadlock situation. Specifically, the changes introduced a race condition when a task that is linked to a cgroup is still executing while attempting to remove that cgroup. The initial fix attempted to defer the removal process until all tasks were out of the cgroup, but it didn't address the scenario where the removal process could block the system, particularly when the 'rmdir' caller is also the reaper of a zombie process. This vulnerability, therefore, poses a risk that could affect kernel stability and system performance.

References