CVE-2026-80777Medium· 4.7▾ SunlitA flaw was found in the Linux kernel. A race condition exists in the futex/pi component during the `exec()` system call. This vulnerability occurs because the memory management (mm) check is incorrect when a task's memory is being swapped …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 19.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
Last analysed / modified upstream
— → 4.7
none → medium
A flaw was found in the Linux kernel. A race condition exists in the futex/pi component during the exec() system call. This vulnerability occurs because the memory management (mm) check is incorrect when a task's memory is being swapped out and freed, while still being referenced by private futexes. This can lead to the system attempting to access freed memory, potentially resulting in memory corruption or system instability.
kernel: futex/pi: Plug private futex exec() race — rated Moderate by Red Hat. Released 2026-09-04, updated 2026-10-24.
Affected:
No fix planned:
Not affected:
Out of support scope
Workarounds / mitigations:
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-80782Medium· 4.1kernel: HID: magicmouse: do not keep a stale msc->input if no input is claimed (CVE-2026-80782)
CVE-2026-80766Medium· 4.2kernel: HID: uclogic: fix use-after-free of inrange_timer on remove (CVE-2026-80766)
CVE-2026-80764Medium· 4.7kernel: Bluetooth: hci_event: fix LE list UAF on reset (CVE-2026-80764)
CVE-2026-80767Medium· 4.7kernel: HID: sensor: custom: Fix use-after-free in enable_sensor (CVE-2026-80767)
CVE-2026-80758Medium· 4.7kernel: futex: Avoid private hash use-after-free on final put (CVE-2026-80758)
CVE-2026-80762Medium· 4.7kernel: Bluetooth: hci_sync: Fix accept list UAF during suspend (CVE-2026-80762)