{
  "cveId": "CVE-2026-99217",
  "url": "https://patchblox.com/security/cve/CVE-2026-99217",
  "summary": "CVE-2026-99217 is fixed in linux on 1 platform by DEBIAN-CVE-2026-99217 (version 6.12.115-1), released November 3, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fork: release the files of a failed fork after s...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  fork: release the files of a failed fork after sched_cancel_fork()  Reorder copy_process() cleanup so sched_fork() taking scx_fork_rwsem scx_pre_fork() is safe and isn\u0027t held around exiting files. Right now, a fork that fails while another thread closed the bpf link fd will deadlock against its own read side. It also blocks every fork on the system:      copy_process()                  holds scx_fork_rwsem for read       exit_files()         close_files()           filp_close_sync()             bpf_scx_unreg()               kthread_flush_work()  waits for the disable work                 scx_root_disable()                   percpu_down_write(\u0026scx_fork_rwsem)  Simply release the child\u0027s files after sched_cancel_fork() dropped the lock. The task starts out as a copy of its parent so p-\u003Efiles points to the parent\u0027s table until copy_files() replaces it. exit_files() must not run for a fork that failed before that. Clear p-\u003Efiles up front so exit_files() is a no-op for those and make copy_files() set it explicitly for CLONE_FILES.",
  "published": "2026-11-02T16:17:45Z",
  "severity": "",
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.115-1",
      "fix": "DEBIAN-CVE-2026-99217",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-99217",
      "released": "2026-11-03T18:58:21Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}