SB2026051457 - Insufficient Control Flow Management in Linux kernel sched

Description

This security bulletin contains information about 1 vulnerability.

1) Insufficient Control Flow Management (CVE-ID: CVE-2026-43482)

CWE-ID: CWE-691 - Insufficient Control Flow Management

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper control of execution state in sched_ext exit handling when claiming exit and kicking helper work. A local user can trigger scheduler exit handling to cause a denial of service.

The issue can leave helper work unqueued, bypass mode inactive, and tasks no longer dispatched, which can wedge the system.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/41423912f7ac7494ccd6eef411227b4efce740e0
• https://git.kernel.org/stable/c/5131dbec2c10961b34f844bc30b400c3fa0bcc72
• https://git.kernel.org/stable/c/522acaae34aa7e05859260056b39c7c030592a0c
• https://git.kernel.org/stable/c/83236b2e43dba00bee5b82eb5758816b1a674f6a