CVE-2026-53162

CVE-2026-53162 affects the Linux kernel memcg subsystem, specifically the refill_stock path. The vulnerability arises from get_random_u32_below() being neither reentrant nor NMI-safe, as it acquires a per‑cpu local_lock during updates of ChaCha batch state. An NMI interrupt arriving mid-update co...

EUVD-2026-39253

In the Linux kernel, the following vulnerability has been resolved: memcg: use round-robin victim selection in refillstock Harry Yoo reported that getrandomu32below is not safe to call in the nmi context and memcg charge draining can happen in nmi context. More specifically getrandomu32below is...