Linux Kernel Vulnerability Affects Core Dump Process and Thread Management

CVE-2026-99218

What is CVE-2026-99218?

A vulnerability in the Linux Kernel relates to the handling of parked threads during core dump operations. The coredump_finish() function aims to release parked threads by clearing their task references without maintaining the necessary RCU (Read-Copy-Update) lock. This oversight allows for potential unsafe conditions where a parked thread may exit before the wake_up_process() function is invoked, leading to situations where it can access freed memory. This vulnerability underscores the critical nature of proper synchronization in thread management to prevent unexpected thread behavior.

References