CVE-2026-43482 Details
Description
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Disable preemption between scx_claim_exit() and kicking helper work scx_claim_exit() atomically sets exit_kind, which prevents scx_error() from triggering further error handling. After claiming exit, the caller must kick the helper kthread work which initiates bypass mode and teardown. If the calling task gets preempted between claiming exit and kicking the helper work, and the BPF scheduler fails to schedule it back (since error handling is now disabled), the helper work is never queued, bypass mode never activates, tasks stop being dispatched, and the system wedges. Disable preemption across scx_claim_exit() and the subsequent work kicking in all callers - scx_disable() and scx_vexit(). Add lockdep_assert_preemption_disabled() to scx_claim_exit() to enforce the requirement.
A vulnerability in the Linux kernel's BPF scheduler can lead to a system hang. This issue occurs in the 'sched_ext' component, specifically in versions through 6.12. The problem arises when a task is preempted after claiming an exit but before initiating the necessary helper work. If the BPF scheduler fails to return the task to execution, the system can become unresponsive. The vulnerability has been addressed by disabling preemption during critical operations, ensuring that the helper work is always executed as needed.
Users can upgrade to the patched version of the Linux kernel available in the Linux kernel stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/41423912f7ac7494ccd6eef411227b4efce740e0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5131dbec2c10961b34f844bc30b400c3fa0bcc72 | kernel.org | Patch |
| https://git.kernel.org/stable/c/522acaae34aa7e05859260056b39c7c030592a0c | kernel.org | Patch |
| https://git.kernel.org/stable/c/83236b2e43dba00bee5b82eb5758816b1a674f6a | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.12, < 6.12.78 >= 6.13, < 6.18.20 >= 6.19, < 6.19.9 7.0 rc1 7.0 rc2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 26, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 13, 2026 | New CVE Received | kernel.org |