Answer in brief
CVE-2026-43438 records a Unknown severity vulnerability in sched_ext: Remove redundant css_put() in scx_cgroup_init(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8195136669661fdfe54e9a8923c33b31c92fc1da <cc095cd305fddbe25a968e4a78436ff9476cf0f6 || >=8195136669661fdfe54e9a8923c33b31c92fc1da <6eaaa67d6998f6c30c462b140db8c062e07ec473 || >=8195136669661fdfe54e9a8923c33b31c92fc1da <bf50f3285eda8a0173625fcdb5f183f96e1008cd || >=8195136669661fdfe54e9a8923c33b31c92fc1da <1336b579f6079fb8520be03624fcd9ba443c930b | cc095cd305fddbe25a968e4a78436ff9476cf0f6, 6eaaa67d6998f6c30c462b140db8c062e07ec473, bf50f3285eda8a0173625fcdb5f183f96e1008cd, 1336b579f6079fb8520be03624fcd9ba443c930b |
| Linux/Linuxgeneric | 6.12 | Not reported |
Published upstream
May 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Remove redundant css_put() in scx_cgroup_init() The iterator css_for_each_descendant_pre() walks the cgroup hierarchy under cgroup_lock(). It does not increment the reference counts on yielded css structs. According to the cgroup documentation, css_put() should only be used to release a reference obtained via css_get() or css_tryget_online(). Since the iterator does not use either of these to acquire a reference, calling css_put() in the error path of scx_cgroup_init() causes a refcount underflow. Remove the unbalanced css_put() to prevent a potential Use-After-Free (UAF) vulnerability.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-43438 records a Unknown severity vulnerability in sched_ext: Remove redundant css_put() in scx_cgroup_init(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8195136669661fdfe54e9a8923c33b31c92fc1da <cc095cd305fddbe25a968e4a78436ff9476cf0f6 || >=8195136669661fdfe54e9a8923c33b31c92fc1da <6eaaa67d6998f6c30c462b140db8c062e07ec473 || >=8195136669661fdfe54e9a8923c33b31c92fc1da <bf50f3285eda8a0173625fcdb5f183f96e1008cd || >=8195136669661fdfe54e9a8923c33b31c92fc1da <1336b579f6079fb8520be03624fcd9ba443c930b | cc095cd305fddbe25a968e4a78436ff9476cf0f6, 6eaaa67d6998f6c30c462b140db8c062e07ec473, bf50f3285eda8a0173625fcdb5f183f96e1008cd, 1336b579f6079fb8520be03624fcd9ba443c930b |
| Linux/Linuxgeneric | 6.12 | Not reported |
Published upstream
May 8, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Remove redundant css_put() in scx_cgroup_init() The iterator css_for_each_descendant_pre() walks the cgroup hierarchy under cgroup_lock(). It does not increment the reference counts on yielded css structs. According to the cgroup documentation, css_put() should only be used to release a reference obtained via css_get() or css_tryget_online(). Since the iterator does not use either of these to acquire a reference, calling css_put() in the error path of scx_cgroup_init() causes a refcount underflow. Remove the unbalanced css_put() to prevent a potential Use-After-Free (UAF) vulnerability.
Quoted source text, attributed separately from HOL analysis.