In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack_file_send_sigiotask() When inspecting the… (CVE-2026-80928)
A use-after-free (UAF) vulnerability in the Linux kernel's Smack security module was fixed in the function smack_file_send_sigiotask(). The issue involved improper access to task credentials, where the code accessed both the non-current task's ->cred pointer and its objective credentials, leading to a potential race condition and UAF. The fix ensures only the objective credentials are accessed, preventing the race and UAF condition.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's Smack module was due to improper handling of task credentials in smack_file_send_sigiotask(). Accessing the ->cred pointer on a non-current task is forbidden except during task creation or destruction, as it can change without synchronization. The vulnerable code accessed both tsk->cred and __task_cred(tsk), causing a race condition that could lead to a use-after-free of the struct cred. The fix enforces always accessing the objective credentials (__task_cred()) to prevent this race and UAF.
Potential Impact
This vulnerability can cause a use-after-free condition in the kernel, which may lead to kernel memory corruption or instability. However, no known exploits in the wild have been reported. The impact is limited to the Linux kernel's Smack module and affects kernel memory safety.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel by modifying smack_file_send_sigiotask() to always access the objective credentials. Users should apply the official kernel update containing this fix once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or Linux kernel mailing lists for the official patch and update guidance.
In the Linux kernel, the following vulnerability has been resolved: smack: fix cred UAF in smack_file_send_sigiotask() When inspecting the… (CVE-2026-80928)
Description
A use-after-free (UAF) vulnerability in the Linux kernel's Smack security module was fixed in the function smack_file_send_sigiotask(). The issue involved improper access to task credentials, where the code accessed both the non-current task's ->cred pointer and its objective credentials, leading to a potential race condition and UAF. The fix ensures only the objective credentials are accessed, preventing the race and UAF condition.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's Smack module was due to improper handling of task credentials in smack_file_send_sigiotask(). Accessing the ->cred pointer on a non-current task is forbidden except during task creation or destruction, as it can change without synchronization. The vulnerable code accessed both tsk->cred and __task_cred(tsk), causing a race condition that could lead to a use-after-free of the struct cred. The fix enforces always accessing the objective credentials (__task_cred()) to prevent this race and UAF.
Potential Impact
This vulnerability can cause a use-after-free condition in the kernel, which may lead to kernel memory corruption or instability. However, no known exploits in the wild have been reported. The impact is limited to the Linux kernel's Smack module and affects kernel memory safety.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel by modifying smack_file_send_sigiotask() to always access the objective credentials. Users should apply the official kernel update containing this fix once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or Linux kernel mailing lists for the official patch and update guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-pw4j-jrv7-fq3m
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-80928"]
Threat ID: 6aa4a03155bf5e2cf5a87203
Added to database: 09/12/2026, 00:43:29 UTC
Last enriched: 09/12/2026, 01:27:04 UTC
Last updated: 09/12/2026, 02:01:29 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.