Linux Kernel Vulnerability in SysV IPC ID Allocation

CVE-2026-52923

What is CVE-2026-52923?

A vulnerability exists in the Linux kernel's SysV IPC ID allocation process. When utilizing the checkpoint/restore sysctl path, requests can exceed valid limits, leading to improper allocation of IPC IDs. This misallocation results in dangling pointers and potential memory corruption, as later attempts to remove these entries may inadvertently target incorrect memory locations. Specifically, when the valid SysV IPC tail is filled, new allocations can occur beyond the designated range, causing inconsistencies. To mitigate this vulnerability, it's vital to bound allocation requests to the valid IPC ID range, preventing spills that compromise system integrity.

References