pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper
Severity and exploitation
KEV coverage does not rule out exploitation.
Severity
unknownCVSS measures technical severity, not the likelihood of an attack.
Known exploitation
Not listed in the checked CISA KEV catalog
Absence from CISA KEV does not rule out attacks.
Public exploit
Not established by this record
Missing evidence does not mean no public exploit exists.
Remediation
Fix status not established
No structured fix or guidance is available here. Check the latest publisher advisory.
What this means
In the Linux kernel, the following vulnerability has been resolved:
Source excerpt · LinuxAttack conditions
No attack-condition excerpt has been identified here. Review the full source description and references for authentication, network access, and configuration requirements.
Review supporting sources →Affected versions
Check the exact model, release, and any platform requirements against your installation.
Linux · Linux
Linux
15 ranges
Linux · Linux
Linux
Compare with this publisher’s ranges. This does not inspect your installation.
affected
edd2754a62bee8d97b4808a15de024f66a1ddccf → before 2c20ace1698d03a23467351be1d281e89b36ade3
git versions
3466abafa9f4f81a869da828e52a12f693175ec2 → before 9ab0324f4868eeb20c63f063a1e5bc01d5539212
git versions
7fea700e04bd3f424c2d836e98425782f97b494e → before 30b274508c743f243c82904954c4e416d7143d4c
git versions
7fea700e04bd3f424c2d836e98425782f97b494e → before 70178691c467c8f9f722765299fd8524c3121a35
git versions
7fea700e04bd3f424c2d836e98425782f97b494e → before 3d15ac36ce174477efa5365e424dbd47950fd2b9
git versions
7fea700e04bd3f424c2d836e98425782f97b494e → before f46cd8241d9b83f2279cc0db3e9d3e181b548a59
git versions
7fea700e04bd3f424c2d836e98425782f97b494e → before 5c0985dd3c32fc2bbd0e8beaf13cf52cd97376a2
git versions
82c7acf9a12c9b4e4b0aba531de82b4e39a345c8
git versions
8e69e589f233ca2c9631f5af2b94f95dfc2ba804
git versions
09ab5b424b17cfe633db58bb2f9edbaf9484cf20
git versions
6.1.95 → before 6.1.191
semver versions
6.6.35 → before 6.6.161
semver versions
5.10.221 → before 5.11
semver versions
5.15.162 → before 5.16
semver versions
6.9.6 → before 6.10
semver versions
Other versions: unaffected
Linux · Linux
Linux
9 ranges
Linux · Linux
Linux
Compare with this publisher’s ranges. This does not inspect your installation.
affected
6.10
unaffected
0 → before 6.10
semver versions
6.1.191 → through 6.1.*
semver versions
6.6.161 → through 6.6.*
semver versions
6.12.115 → through 6.12.*
semver versions
6.18.60 → through 6.18.*
semver versions
7.2.14 → through 7.2.*
semver versions
7.3.1 → through 7.3.*
semver versions
7.4-rc1 → through *
original_commit_for_fix versions
Other versions: affected
What to do
Compare your installed product and version with the affected versions above. A matching product name alone does not confirm exposure.
No structured fix or remediation guidance is available here. Check the full source description and vendor’s latest advisory for a patch or workaround; do not assume another version is safe.
cve.new guidance unless attributed to a publisher. This page does not inspect your installation.
Public exploit evidence
No public exploit reference is identified in the imported evidence. This is not a claim that no exploit exists.
Original source description
Read the full publisher description
In the Linux kernel, the following vulnerability has been resolved:
pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper
Since commit 7fea700e04bd ("zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING") zap_pid_ns_processes() clears TIF_NOTIFY_SIGNAL before every kernel_wait4() call. Otherwise kernel_wait4() doesn't sleep and returns -ERESTARTSYS if signal_pending() is true and the reaper busy-waits.
But clearing TIF_NOTIFY_SIGNAL doesn't fix it. It can get raised again. For example, klp_send_signals() sets it raw against any task that hasn't transitioned yet. And it keeps sending it until the livepatch finishes.
The sleep loop waiting for pid_allocated to drop has the same problem and it doesn't even clear anything. So a schedule() in TASK_INTERRUPTIBLE returns immediately.
Use a no_notify_signal guard. signal_pending() will ignore TIF_NOTIFY_SIGNAL and the pid namespace reaper sleeps until a child exits or free_pid() wakes it.
References
7 sourcesView 1 more references
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-99244View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Environment requirements
These conditions apply together as specified by the publisher. A matching product name alone does not establish exposure.
Linux · platform conditions
Any condition may hold
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 6.1.95
Before: 6.1.191
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 6.6.35
Before: 6.6.161
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 6.10
Before: 6.12.115
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 6.10
Before: 6.18.60
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 6.10
Before: 7.2.14
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 6.10
Before: 7.3.1
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 6.10
Before: 7.4-rc1
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 5.10.221
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 5.15.162
Vulnerable product
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*From (inclusive): 6.9.6
Original applicability statements
[
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.1.95",
"versionEndExcluding": "6.1.191"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.6.35",
"versionEndExcluding": "6.6.161"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.10",
"versionEndExcluding": "6.12.115"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.10",
"versionEndExcluding": "6.18.60"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.10",
"versionEndExcluding": "7.2.14"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.10",
"versionEndExcluding": "7.3.1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.10",
"versionEndExcluding": "7.4-rc1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10.221"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15.162"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.9.6"
}
]
}
]
}
]Contributing organizations · 1
Assigning organization
Timeline
All times UTCAdvisory published
Publication date supplied by the source.
Source updated
Latest modification date supplied by the source.
Last imported by cve.new
Latest catalog import, not the date we first saw this advisory.
What changed
Follow changes- CVE · CVE-2026-99244
Observed 2026-11-03T19:50:59.008Z · upstream updated 2026-11-03T19:13:09.510Z
Product or version evidence changed
before
[ { "vendor": "Linux", "name": "Linux", "platforms": [], "versions": [ { "version": "edd2754a62bee8d97b4808a15de024f66a1ddccf", "status": "affected", "lessThan": "2c20ace1698d03a23467351be1d281e89b36ade3", "versionType": "git" }, { "version": "3466abafa9f4f81a869da828e52a12f693175ec2", "status": "affected", "lessThan": "9ab0324f4868eeb20c63f063a1e5bc01d5539212", "versionType": "git" }, { "version": "7fea700e04bd3f424c2d836e98425782f97b494e", "status": "affected", "lessThan": "30b274508c743f243c82904954c4e416d7143d4c", "versionType": "git" }, { "version": "7fea700e04bd3f424c2d836e98425782f97b494e", "status": "affected", "lessThan": "70178691c467c8f9f722765299fd8524c3121a35", "versionType": "git" }, { "version": "7fea700e04bd3f424c2d836e98425782f97b494e", "status": "affected", "lessThan": "3d15ac36ce174477efa5365e424dbd47950fd2b9", "versionType": "git" }, { "version": "7fea700e04bd3f424c2d836e98425782f97b494e", "status": "affected", "lessThan": "f46cd8241d9b83f2279cc0db3e9d3e181b548a59", "versionType": "git" }, { "version": "82c7acf9a12c9b4e4b0aba531de82b4e39a345c8", "status": "affected", "versionType": "git" }, { "version": "8e69e589f233ca2c9631f5af2b94f95dfc2ba804", "status": "affected", "versionType": "git" }, { "version": "09ab5b424b17cfe633db58bb2f9edbaf9484cf20", "status": "affected", "versionType": "git" }, { "version": "6.1.95", "status": "affected", "lessThan": "6.1.191", "versionType": "semver" }, { "version": "6.6.35", "status": "affected", "lessThan": "6.6.161", "versionType": "semver" }, { "version": "5.10.221", "status": "affected", "lessThan": "5.11", "versionType": "semver" }, { "version": "5.15.162", "status": "affected", "lessThan": "5.16", "versionType": "semver" }, { "version": "6.9.6", "status": "affected", "lessThan": "6.10", "versionType": "semver" } ], "defaultStatus": "unaffected", "cpes": [], "source": "Linux", "url": "https://www.cve.org/CVERecord?id=CVE-2026-99244" }, { "vendor": "Linux", "name": "Linux", "platforms": [], "versions": [ { "version": "6.10", "status": "affected" }, { "version": "0", "status": "unaffected", "lessThan": "6.10", "versionType": "semver" }, { "version": "6.1.191", "status": "unaffected", "lessThanOrEqual": "6.1.*", "versionType": "semver" }, { "version": "6.6.161", "status": "unaffected", "lessThanOrEqual": "6.6.*", "versionType": "semver" }, { "version": "6.12.115", "status": "unaffected", "lessThanOrEqual": "6.12.*", "versionType": "semver" }, { "version": "6.18.60", "status": "unaffected", "lessThanOrEqual": "6.18.*", "versionType": "semver" }, { "version": "7.2.14", "status": "unaffected", "lessThanOrEqual": "7.2.*", "versionType": "semver" }, { "version": "7.3.1", "status": "unaffected", "lessThanOrEqual": "7.3.*", "versionType": "semver" } ], "defaultStatus": "affected", "cpes": [], "source": "Linux", "url": "https://www.cve.org/CVERecord?id=CVE-2026-99244" } ]after
[ { "vendor": "Linux", "name": "Linux", "platforms": [], "versions": [ { "version": "edd2754a62bee8d97b4808a15de024f66a1ddccf", "status": "affected", "lessThan": "2c20ace1698d03a23467351be1d281e89b36ade3", "versionType": "git" }, { "version": "3466abafa9f4f81a869da828e52a12f693175ec2", "status": "affected", "lessThan": "9ab0324f4868eeb20c63f063a1e5bc01d5539212", "versionType": "git" }, { "version": "7fea700e04bd3f424c2d836e98425782f97b494e", "status": "affected", "lessThan": "30b274508c743f243c82904954c4e416d7143d4c", "versionType": "git" }, { "version": "7fea700e04bd3f424c2d836e98425782f97b494e", "status": "affected", "lessThan": "70178691c467c8f9f722765299fd8524c3121a35", "versionType": "git" }, { "version": "7fea700e04bd3f424c2d836e98425782f97b494e", "status": "affected", "lessThan": "3d15ac36ce174477efa5365e424dbd47950fd2b9", "versionType": "git" }, { "version": "7fea700e04bd3f424c2d836e98425782f97b494e", "status": "affected", "lessThan": "f46cd8241d9b83f2279cc0db3e9d3e181b548a59", "versionType": "git" }, { "version": "7fea700e04bd3f424c2d836e98425782f97b494e", "status": "affected", "lessThan": "5c0985dd3c32fc2bbd0e8beaf13cf52cd97376a2", "versionType": "git" }, { "version": "82c7acf9a12c9b4e4b0aba531de82b4e39a345c8", "status": "affected", "versionType": "git" }, { "version": "8e69e589f233ca2c9631f5af2b94f95dfc2ba804", "status": "affected", "versionType": "git" }, { "version": "09ab5b424b17cfe633db58bb2f9edbaf9484cf20", "status": "affected", "versionType": "git" }, { "version": "6.1.95", "status": "affected", "lessThan": "6.1.191", "versionType": "semver" }, { "version": "6.6.35", "status": "affected", "lessThan": "6.6.161", "versionType": "semver" }, { "version": "5.10.221", "status": "affected", "lessThan": "5.11", "versionType": "semver" }, { "version": "5.15.162", "status": "affected", "lessThan": "5.16", "versionType": "semver" }, { "version": "6.9.6", "status": "affected", "lessThan": "6.10", "versionType": "semver" } ], "defaultStatus": "unaffected", "cpes": [], "source": "Linux", "url": "https://www.cve.org/CVERecord?id=CVE-2026-99244" }, { "vendor": "Linux", "name": "Linux", "platforms": [], "versions": [ { "version": "6.10", "status": "affected" }, { "version": "0", "status": "unaffected", "lessThan": "6.10", "versionType": "semver" }, { "version": "6.1.191", "status": "unaffected", "lessThanOrEqual": "6.1.*", "versionType": "semver" }, { "version": "6.6.161", "status": "unaffected", "lessThanOrEqual": "6.6.*", "versionType": "semver" }, { "version": "6.12.115", "status": "unaffected", "lessThanOrEqual": "6.12.*", "versionType": "semver" }, { "version": "6.18.60", "status": "unaffected", "lessThanOrEqual": "6.18.*", "versionType": "semver" }, { "version": "7.2.14", "status": "unaffected", "lessThanOrEqual": "7.2.*", "versionType": "semver" }, { "version": "7.3.1", "status": "unaffected", "lessThanOrEqual": "7.3.*", "versionType": "semver" }, { "version": "7.4-rc1", "status": "unaffected", "lessThanOrEqual": "*", "versionType": "original_commit_for_fix" } ], "defaultStatus": "affected", "cpes": [], "source": "Linux", "url": "https://www.cve.org/CVERecord?id=CVE-2026-99244" } ]References changed
before
[ "https://git.kernel.org/stable/c/2c20ace1698d03a23467351be1d281e89b36ade3", "https://git.kernel.org/stable/c/9ab0324f4868eeb20c63f063a1e5bc01d5539212", "https://git.kernel.org/stable/c/30b274508c743f243c82904954c4e416d7143d4c", "https://git.kernel.org/stable/c/70178691c467c8f9f722765299fd8524c3121a35", "https://git.kernel.org/stable/c/3d15ac36ce174477efa5365e424dbd47950fd2b9", "https://git.kernel.org/stable/c/f46cd8241d9b83f2279cc0db3e9d3e181b548a59" ]
after
[ "https://git.kernel.org/stable/c/2c20ace1698d03a23467351be1d281e89b36ade3", "https://git.kernel.org/stable/c/9ab0324f4868eeb20c63f063a1e5bc01d5539212", "https://git.kernel.org/stable/c/30b274508c743f243c82904954c4e416d7143d4c", "https://git.kernel.org/stable/c/70178691c467c8f9f722765299fd8524c3121a35", "https://git.kernel.org/stable/c/3d15ac36ce174477efa5365e424dbd47950fd2b9", "https://git.kernel.org/stable/c/f46cd8241d9b83f2279cc0db3e9d3e181b548a59", "https://git.kernel.org/stable/c/5c0985dd3c32fc2bbd0e8beaf13cf52cd97376a2" ]
Environment requirements changed
before
[ { "source": "Linux", "statements": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.95", "versionEndExcluding": "6.1.191" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.35", "versionEndExcluding": "6.6.161" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.12.115" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.18.60" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.2.14" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.3.1" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.221" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.162" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9.6" } ] } ] } ] } ]after
[ { "source": "Linux", "statements": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.95", "versionEndExcluding": "6.1.191" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.35", "versionEndExcluding": "6.6.161" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.12.115" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "6.18.60" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.2.14" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.3.1" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10", "versionEndExcluding": "7.4-rc1" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.221" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.15.162" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.9.6" } ] } ] } ] } ]
Large field values are marked as truncated previews. Original source snapshots remain retained.
Showing up to 50 most recent observed changes.