https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 17:36:21 +0000 https://vulnerability.circl.lu/vuln/cve-2026-43438 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>sched_ext: Remove redundant css_put() in scx_cgroup_init()</p> <p>The iterator css_for_each_descendant_pre() walks the cgroup hierarchy under cgroup_lock(). It does not increment the reference counts on yielded css structs.</p> <p>According to the cgroup documentation, css_put() should only be used to release a reference obtained via css_get() or css_tryget_online(). Since the iterator does not use either of these to acquire a reference, calling css_put() in the error path of scx_cgroup_init() causes a refcount underflow.</p> <p>Remove the unbalanced css_put() to prevent a potential Use-After-Free (UAF) vulnerability.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>sched_ext: Remove redundant css_put() in scx_cgroup_init()</p> <p>The iterator css_for_each_descendant_pre() walks the cgroup hierarchy under cgroup_lock(). It does not increment the reference counts on yielded css structs.</p> <p>According to the cgroup documentation, css_put() should only be used to release a reference obtained via css_get() or css_tryget_online(). Since the iterator does not use either of these to acquire a reference, calling css_put() in the error path of scx_cgroup_init() causes a refcount underflow.</p> <p>Remove the unbalanced css_put() to prevent a potential Use-After-Free (UAF) vulnerability.</p> https://vulnerability.circl.lu/vuln/cve-2026-43438