Race condition in Linux kernel - CVE-2026-72306
Published: August 16, 2026
Vulnerability identifier: #VU143132
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-72306
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a race condition in vduse_dev_msg_sync and vduse_dev_read_iter in drivers/vdpa/vdpa_user/vduse_dev.c when handling VDUSE device message processing. A local user can trigger concurrent message operations to cause a denial of service.
The issue can lead to a double list_del() crash when a timed-out message is concurrently removed.
Affected software
Linux kernel
How to mitigate CVE-2026-72306
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/09723f26ed801c083e914cec4cc0e1af4b933dc7
- https://git.kernel.org/stable/c/3755965adbb617f4283ac6ccd351ed0676843cba
- https://git.kernel.org/stable/c/8062ff9d366c4bc4ae775e14eac9a769f20c60dd
- https://git.kernel.org/stable/c/ae9c13b6fd79087cc5a216ee1649b6f012c2a238
- https://git.kernel.org/stable/c/c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a
- https://git.kernel.org/stable/c/d7e7c813834c6c05c26033456ab7169e2f9c99eb
- https://git.kernel.org/stable/c/d8715b5a8fdb23fef576700e71d0c253dbeddad4