CVE-2026-97903

Published 25 September 2026 · tracked since 26 September 2026

Description

In the Linux kernel, the following vulnerability has been resolved:exit: hold a reference to thread_pid across proc_flush_pidCommit 0a36bad01731 ("release_task: kill the no longer needed get/put_pid(thread_pid)") removed the reference around proc_flush_pid(). It assumed that free_pids(post.pids)

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-100876 MEDIUM 6.3
• CVE-2026-100875 HIGH 7.3
• CVE-2026-100873 MEDIUM 4.3
• CVE-2026-100874 HIGH 7.3
• CVE-2026-101060 HIGH 8.2
• CVE-2026-101061 MEDIUM 4.7
• CVE-2026-101047 MEDIUM 5.3
• CVE-2026-101057 LOW 3.1
• CVE-2026-101058 MEDIUM 6.9
• CVE-2026-101044 HIGH 7.1

→ Open the live CVE board · all tools