Description
In the Linux kernel, the following vulnerability has been resolved:
futex: Require sys_futex_requeue() to have identical flags
Nicholas reported that his LLM found it was possible to create a UaF
when sys_futex_requeue() is used with different flags. The initial
motivation for allowing different flags was the variable sized futex,
but since that hasn't been merged (yet), simply mandate the flags are
identical, as is the case for the old style sys_futex() requeue
operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 6.7 | 6.12.80 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.19.11-1 | — |
| Debian 13 | linux | 6.12.85-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1028.33 | — |
| Ubuntu 25.10 | linux +8 | No fix yet | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-136.136 | USN-8567-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1061.64 | USN-8595-2 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1063.71 | USN-8606-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1062.69 | USN-8607-1 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1064.72 | USN-8567-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1059.67 | USN-8567-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1046.50 | USN-8567-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1061.62 | USN-8574-3 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-136.136.2 | USN-8574-2 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1059.62 | USN-8596-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1059.62.1 | USN-8596-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1030.31 | USN-8574-3 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1058.61 | USN-8574-2 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1061.65 | USN-8665-1 |
| Ubuntu 24.04 LTS | linux-riscv +27 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-vmware | 6.8.0-1008.8 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1033.34 | USN-8574-3 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1061.64~22.04.1 | USN-8595-3 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1063.71~22.04.1 | USN-8606-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1062.69~22.04.1 | USN-8609-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1064.72~22.04.1 | USN-8567-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-136.136~22.04.1 | USN-8619-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1061.62~22.04.1 | USN-8574-3 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-136.136.2~22.04.1 | USN-8574-2 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1059.62~22.04.1 | USN-8596-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1058.61~22.04.1 | USN-8595-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-136.136~22.04.3 | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2050.52 | USN-8665-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1056.57 | USN-8567-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 +1 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1056.57~22.04.2 | USN-8567-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1061.64+fips1 | USN-8595-3 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1063.71+fips2 | USN-8608-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-136.136+fips2 | USN-8574-2 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1064.72+fips1 | USN-8574-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | rv +75 | 5.14.0-687.36.1.el9_8 | RHSA-2026:51035 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | rv +73 | 5.14.0-687.36.1.el9_8 | ALSA-2026:51035 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 14-160000.4.3 | SUSE-SU-2026:22383-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_1 | 12-160000.1.1 | SUSE-SU-2026:22384-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_2 | 10-160000.1.1 | SUSE-SU-2026:22385-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_3 | 9-160000.1.1 | SUSE-SU-2026:22390-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_4 | 8-160000.1.1 | SUSE-SU-2026:22386-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_5 | 7-160000.1.1 | SUSE-SU-2026:22507-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_6 | 6-160000.1.1 | SUSE-SU-2026:22387-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_7 | 5-160000.1.1 | SUSE-SU-2026:22388-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_8 | 4-160000.1.1 | SUSE-SU-2026:22389-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 3-160000.1.1 | SUSE-SU-2026:22509-1, SUSE-SU-2026:22508-1, SUSE-SU-2026:22391-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 14-160000.4.3 | SUSE-SU-2026:22383-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_1 | 12-160000.1.1 | SUSE-SU-2026:22384-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_2 | 10-160000.1.1 | SUSE-SU-2026:22385-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_3 | 9-160000.1.1 | SUSE-SU-2026:22390-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_4 | 8-160000.1.1 | SUSE-SU-2026:22386-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_5 | 7-160000.1.1 | SUSE-SU-2026:22507-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_6 | 6-160000.1.1 | SUSE-SU-2026:22387-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_7 | 5-160000.1.1 | SUSE-SU-2026:22388-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_8 | 4-160000.1.1 | SUSE-SU-2026:22389-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_9 +2 | 3-160000.1.1 | SUSE-SU-2026:22509-1, SUSE-SU-2026:22508-1, SUSE-SU-2026:22391-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_0 | 14-160000.4.3 | SUSE-SU-2026:22276-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_1 | 12-160000.1.1 | SUSE-SU-2026:22277-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_10 | 3-160000.1.1 | SUSE-SU-2026:22288-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_2 | 10-160000.1.1 | SUSE-SU-2026:22278-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_3 | 9-160000.1.1 | SUSE-SU-2026:22283-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_4 | 8-160000.1.1 | SUSE-SU-2026:22279-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_6 | 6-160000.1.1 | SUSE-SU-2026:22280-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_7 | 5-160000.1.1 | SUSE-SU-2026:22281-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_8 | 4-160000.1.1 | SUSE-SU-2026:22282-1 |
| SLE Micro 6.2 | kernel-syms +1 | 6.12.0-160000.33.1 | SUSE-SU-2026:21834-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.25-52.107 +1 | 1:1.0-0.amzn2023 | ALAS2023-2026-1746, ALAS2023-2026-1646 |
| Amazon Linux 2023 | perf6.12 +14 | 1:6.12.80-105.147.amzn2023 | ALAS2023-2026-1646 |
| Amazon Linux 2023 | perf6.18 +11 | 1:6.18.25-52.107.amzn2023 | ALAS2023-2026-1746 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-204.92.4.2.el10uek | ELSA-2026-50372 |
Advisories 42
- USN-8574-2 linux-fips, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8596-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8607-1 linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8608-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8595-1 linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8595-3 linux-aws-6.8, linux-aws-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8609-1 linux-azure-fde-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8595-2 linux-aws vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8574-1 linux-gcp-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8574-3 linux-ibm, linux-ibm-6.8, linux-nvidia-tegra, linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8619-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8665-1 linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-8606-1 linux-azure, linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- RHSA-2026:51035 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- WID-SEC-2026-1279 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8567-1 linux, linux-gcp, linux-gcp-6.8, linux-gke, linux-gkeop, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- ALSA-2026:51035 Moderate: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- SUSE-SU-2026:21834-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 9, 2026
- SUSE-SU-2026:22507-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 7, 2026
- SUSE-SU-2026:22508-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 7, 2026
- SUSE-SU-2026:22509-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 7, 2026
- SUSE-SU-2026:22388-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 2, 2026
- SUSE-SU-2026:22389-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 2, 2026
- SUSE-SU-2026:22390-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 2, 2026
- SUSE-SU-2026:22391-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 2, 2026
- SUSE-SU-2026:22384-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 2, 2026
- SUSE-SU-2026:22385-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 2, 2026
- SUSE-SU-2026:22386-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 2, 2026
- SUSE-SU-2026:22387-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 2, 2026
- SUSE-SU-2026:22383-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jul 2, 2026
- ELSA-2026-50372 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Jul 2, 2026
- ALAS2023-2026-1746 Important: kernel6.18 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jul 1, 2026
- SUSE-SU-2026:22282-1 Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22283-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22279-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22280-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22281-1 Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22276-1 Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22277-1 Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22278-1 Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jun 30, 2026
- SUSE-SU-2026:22288-1 Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 16) SUSE / openSUSE Security Updates · Jun 30, 2026
- ALAS2023-2026-1646 Important: kernel6.12 security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · May 11, 2026