Search: CVE-2026-23415

CVE-2026-23415 is a use-after-free vulnerability in the Linux kernel's futex subsystem. It occurs due to a race condition between futex_key_to_node_opt() and vma_replace_policy(), where a mempolicy pointer is dereferenced after being freed. This flaw can lead to memory corruption and potentially allow an attacker with local privileges to cause a denial of service or escalate privileges. The issue is fixed by adding RCU synchronization to the __mpol_put() function.