CVE-2026-64036

cgroup/rstat: validate cpu before css_rstat_cpu() access

References

Notes


      

Bugs

Status

Branch Status
upstream released (7.1-rc5) [8817005efbdfdf5d4e4814cb5dc52b53d12917d7]
7.2-upstream-stable N/A "Fixed before branching point"
7.1-upstream-stable N/A "Fixed before branching point"
7.0-upstream-stable released (7.0.11) [fd2bd9fa7700ddf28296486b2598cff2f80cc819]
6.18-upstream-stable released (6.18.34) [6a01413a4e8fcb0263d7bef5075c5f8f4eb3a8b6]
6.12-upstream-stable released (6.12.114) [3d595affbe00a2e8bf43b9f2947a8efcdc1c059e]
6.6-upstream-stable released (6.6.160) [b28b862b07257219755d0b0a7fbe5d23b7c9ea91]
6.1-upstream-stable released (6.1.191) [ee5afb74688aa6f1f16d8c7e7b6bfaf803fb62fc]
5.10-upstream-stable N/A "Vulnerable code not present"
sid released (7.0.12-1)
6.12-trixie-security released (6.12.115-1)
6.1-bookworm-security needed
5.10-bullseye-security N/A "Vulnerable code not present"