Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: futex/pi: Plug private futex exec() race The check for private futexes whether… (CVE-2026-80777)

The Linux kernel futex subsystem had a race condition vulnerability (CVE-2026-80777) involving private futexes during the exec() system call. The vulnerability stems from an inadequate check of the waiter's mm against the owner's mm, which fails during the mm swap phase of exec(). This gap allows the futex state to be incorrectly interpreted because the mm is in transition and may be freed. The patch addresses this by updating the futex exit state to DEAD during futex_exec_release() and resetting it to OK only after the mm has been safely switched, preventing incorrect futex state assumptions.

This vulnerability could lead to incorrect futex state handling during process execution transitions, potentially causing race conditions or inconsistent futex behavior in the kernel. The exact impact is not detailed, and no known exploits are reported. The issue affects kernel stability and correctness related to private futexes during exec().

A fix has been implemented in the Linux kernel to address this vulnerability by adjusting the futex exit state during exec() transitions. Users should apply the official Linux kernel updates that include this patch to remediate the issue. Since this is a kernel-level fix, upgrading to a patched kernel version is the recommended mitigation.