CVE-2026-43438: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Remove redundant css_put() in scx_cgroup_init() The iterator css_for_each_descendant_pre() walks the cgroup hierarchy under cgroup_lock(). It does not increment the reference counts on yielded css structs. According to the cgroup documentation, css_put() should only be used to release a reference obtained via css_get() or css_tryget_online(). Since the iterator does not use either of these to acquire a reference, calling css_put() in the error path of scx_cgroup_init() causes a refcount underflow. Remove the unbalanced css_put() to prevent a potential Use-After-Free (UAF) vulnerability.

Засегнати продукти

• Linux Linux: 8195136669661fdfe54e9a8923c33b31c92fc1da преди cc095cd305fddbe25a968e4a78436ff9476cf0f6; 8195136669661fdfe54e9a8923c33b31c92fc1da преди 6eaaa67d6998f6c30c462b140db8c062e07ec473; 8195136669661fdfe54e9a8923c33b31c92fc1da преди bf50f3285eda8a0173625fcdb5f183f96e1008cd; 8195136669661fdfe54e9a8923c33b31c92fc1da преди 1336b579f6079fb8520be03624fcd9ba443c930b
• Linux Linux: 6.12; преди 6.12; 6.12.78 до 6.12.*; 6.18.19 до 6.18.*; 6.19.9 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-43438
• https://nvd.nist.gov/vuln/detail/CVE-2026-43438
• https://git.kernel.org/stable/c/cc095cd305fddbe25a968e4a78436ff9476cf0f6
• https://git.kernel.org/stable/c/6eaaa67d6998f6c30c462b140db8c062e07ec473
• https://git.kernel.org/stable/c/bf50f3285eda8a0173625fcdb5f183f96e1008cd
• https://git.kernel.org/stable/c/1336b579f6079fb8520be03624fcd9ba443c930b