CVE-2026-63802

CVE-2026-63802 affects the Linux kernel’s blk-cgroup code. The vulnerability is a use-after-free that can occur when multiple blkgs in the same blkcg are released concurrently. The race happens as __blkcg_rstat_flush() can remove another blkg’s iostat entries via llist_del_all(), leading the seco...