CVE-2026-43489

kernel: liveupdate: luo_file: remember retrieve() status

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 13, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's liveupdate mechanism. When a retrieve() operation fails, the system does not properly record the failure status. This allows a local attacker to repeatedly attempt the operation, potentially leading to attempts to access or free already freed data structures. Such actions can result in system instability or a denial of service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-390 · Detection of Error Condition Without Action