01 Record

CVE-2026-53163

locking/rtmutex: Skip remove_waiter() when waiter is not enqueued

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

locking/rtmutex: Skip remove_waiter() when waiter is not enqueued

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.12% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 1.7% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-24.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-06-25 08:38Z4 MO AGO

Last updated

2026-07-24 14:33Z3 MO AGO

Reserved

2026-06-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase

Data version

5.2

Document digest

457966d841f158072093af64eb9faef3647f74b4e448092f8de04527b2878b59

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf3fa3424bceb128d2be4b3745506b22844b87db7 to < bfbc047ceb42c0e1fac8f3a155d4548a8bbe76b1, 838ce5cb5d93c3ab8b27e75bc6ad905a94b752fd to < 4ffacf76a457b7ca8ac05f5df8740b0d8f53574a, d8cce4773c2b23d819baf5abedc62f7b430e8745 to < 4afda3a1da02129568a3a2f1898aa13e6763bcba, 8a1fc8d698ac5e5916e3082a0f74450d71f9611f to < 6707d7e0b71748cb3cd95bad81dae5fe1b3c8f48, 6d52dfcb2a5db86e346cf51f8fcf2071b8085166 to < 5799f9bd7fee40370b93ab1ddf001cdc7017c14d, 3fb7394a837740770f0d6b4b30567e60786a63f2 to < a388e3dfaf9538a680de5ed43a8ebb5dd45b6e53, 88614876370aac8ad1050ad785a4c095ba17ac11 to < 55363fa0a04524d11efeaadee734d2db1756ed27, 3bfdc63936dd4773109b7b8c280c0f3b5ae7d349 to < 40a25d59e85b3c8709ac2424d44f65610467871e, 6.1.175 to < 6.1.177, 6.6.140 to < 6.6.144, 6.12.86 to < 6.12.95, 6.18.27 to < 6.18.36, 7.0.4 to < 7.0.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/bfbc047ceb42c0e1fac8f3a155d4548a8bbe76b1
git.kernel.orghttps://git.kernel.org/stable/c/4ffacf76a457b7ca8ac05f5df8740b0d8f53574a
git.kernel.orghttps://git.kernel.org/stable/c/4afda3a1da02129568a3a2f1898aa13e6763bcba
git.kernel.orghttps://git.kernel.org/stable/c/6707d7e0b71748cb3cd95bad81dae5fe1b3c8f48
git.kernel.orghttps://git.kernel.org/stable/c/5799f9bd7fee40370b93ab1ddf001cdc7017c14d
git.kernel.orghttps://git.kernel.org/stable/c/a388e3dfaf9538a680de5ed43a8ebb5dd45b6e53
git.kernel.orghttps://git.kernel.org/stable/c/55363fa0a04524d11efeaadee734d2db1756ed27
git.kernel.orghttps://git.kernel.org/stable/c/40a25d59e85b3c8709ac2424d44f65610467871e

07 Fixed in

Debian 12

linux
Fixed in 6.1.177-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.95-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.0.13-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.