CVE-2026-43417

kernel: sched/mmcid: Handle vfork()/CLONE_VM correctly

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel. The logic for handling tasks created using vfork() (a system call that creates a new process) contains an error. This can cause a task to enter an endless loop when attempting to acquire a Context ID (CID) during scheduling. A local user could exploit this vulnerability, leading to a system stall and a Denial of Service (DoS) for the affected machine.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1095 · Loop Condition Value Update within the Loop