CVE-2026-43438
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
08/05/2026
Last modified:
12/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
sched_ext: Remove redundant css_put() in scx_cgroup_init()<br />
<br />
The iterator css_for_each_descendant_pre() walks the cgroup hierarchy<br />
under cgroup_lock(). It does not increment the reference counts on<br />
yielded css structs.<br />
<br />
According to the cgroup documentation, css_put() should only be used<br />
to release a reference obtained via css_get() or css_tryget_online().<br />
Since the iterator does not use either of these to acquire a reference,<br />
calling css_put() in the error path of scx_cgroup_init() causes a<br />
refcount underflow.<br />
<br />
Remove the unbalanced css_put() to prevent a potential Use-After-Free<br />
(UAF) vulnerability.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH