PT-2026-39078 · Linux · Linux Kernel

·

CVE-2026-43417

·

Published

2026-03-10

·

Updated

2026-05-24

CVSS v4.0

6.8

Medium

VectorAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the sched/mmcid component regarding the handling of vfork() and CLONE VM. A logic error occurs when the number of tasks associated with a process is smaller than the number of MMCID users. The system incorrectly accounts for already processed tasks while searching the task list for a vfork()ed task. If this leads to the number of tasks to be handled reaching zero, the walk stops without fixing the vfork()ed task's CID. This results in a failure to acquire a transitional CID during a subsequent schedule in, causing the machine to stall. This can lead to a state where a task endlessly loops in the mm get cid() function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Initialization

Improper Resource Release

Infinite Loop

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13234
CVE-2026-43417

Affected Products

Linux Kernel