CVE-2026-52930: ipc/shm: serialize orphan cleanup with shm_nattch updates
In the Linux kernel, the following vulnerability has been resolved:
ipc/shm: serialize orphan cleanup with shmnattch updates
shmdestroyorphaned() walks the shm idr under shmids(ns).rwsem, but that does not serialize all fields tested by shmmaydestroy(). In particular, shmnattch is updated while holding shmperm.lock, and attach paths can do that without holding the rwsem.
Do not decide that an orphaned segment is unused before taking the object lock. Move the shmmaydestroy() check under shmperm.lock, matching the other destroy paths, and unlock the segment when it no longer qualifies for removal.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-52930?
The severity of CVE-2026-52930 is rated as 34.
How do I fix CVE-2026-52930?
To fix CVE-2026-52930, update the Linux kernel to the patched version provided by The Linux Foundation.
What systems are affected by CVE-2026-52930?
CVE-2026-52930 affects systems running vulnerable versions of the Linux kernel.
What type of vulnerability is CVE-2026-52930?
CVE-2026-52930 is a kernel vulnerability related to the serialization of orphan cleanup during shared memory updates.
What are the implications of CVE-2026-52930?
Exploitation of CVE-2026-52930 could lead to improper handling of shared memory, potentially allowing unauthorized access or system instability.