CVE-2026-63802
CVE CVE-2026-63802EUVD EUVD-2026-45468Published 2026-07-19T12:02:08.000ZLast changed 2026-08-05T12:35:50.000ZCVSS 7.8
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When multiple blkgs in the same blkcg are released concurrently, a use-after-free can occur. The race happens when one blkg's __blkcg_rstat_flush() removes another blkg's iostat entries via llist_del_all(). The second blkg sees an empty list and proceeds to free itself while the first is still iterating over its entries. Move the flush from __blkg_release() (RCU callback) to blkg_release() (before call_rcu). This ensures the RCU grace period waits for any concurrent flush's rcu_read_lock() section to complete before freeing.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux 20cb1c2fb7568a6054c55defe044311397e01ddb <5e5b7f2ef854936e95dceb6a2fdfefcb7152d2c6; 6.4; patch: 7.2-rc1; 20cb1c2fb7568a6054c55defe044311397e01ddb <bbebd9425cad3573d1527441753899b926525a0f; patch: 6.12.95; 0f6090d90f627d8c58f939067d6c6821ce1b3c68; 20cb1c2fb7568a6054c55defe044311397e01ddb <96e545410c4f74c89d496c1d5d9ef8d08f14368b; patch: 0; patch: 7.1.3; patch: 6.18.38; patch: 6.6.144; 6.3.9 <6.4; 20cb1c2fb7568a6054c55defe044311397e01ddb <afebe44facc48a61761e885bbb7f0380d4a603ec; 20cb1c2fb7568a6054c55defe044311397e01ddb <0ab5ee5a1badb58cbb2242617cb01a4972b1f2a2
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.