CVE-2026-53166

✕ Withdrawn — historical dataMEDIUMNVD 5.5
5.5CVSS

In the Linux kernel, the following vulnerability has been resolved:

futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock

When FUTEX_CMP_REQUEUE_PI requeues a non-top waiter that already owns the target PI futex, task_blocks_on_rt_mutex() returns -EDEADLK before setting waiter->task.

The subsequent remove_waiter() in rt_mutex_start_proxy_lock() dereferences the NULL waiter->task, causing a kernel crash.

Add a self-deadlock check for non-top waiters before calling rt_mutex_start_proxy_lock(), analogous to the top-waiter check in futex_lock_pi_atomic().

CVSS v3
5.5
EchelonGraph score
Not yet assessedThis CVE record was withdrawn by its numbering authority, so there is no vulnerability to rate.
EPSS PROB
—
EPSS %ILE
—
KEV
—Not applicable: this CVE ID was withdrawn

Published

June 25, 2026

Last Modified

July 7, 2026

References (3)

Frequently asked(4)

What is CVE-2026-53166?
CVE-2026-53166 is a rejected CVE ID: its record was withdrawn on July 10, 2026 and no longer describes a vulnerability. Reason given: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
When was the CVE record for CVE-2026-53166 published?
The CVE record for CVE-2026-53166 was published on June 25, 2026. EchelonGraph's copy of the record carries a last-modified date of July 7, 2026; the record at its source may have been updated since.
What is the CVSS score of CVE-2026-53166?
CVE-2026-53166 has a CVSS v3 base score of 5.5 (NVD).
How do I remediate CVE-2026-53166?
There is nothing to remediate under CVE-2026-53166: it is a rejected (withdrawn) CVE ID and no longer describes a vulnerability.