CVE-2026-43402 - Vulnerability Analysis

Overview

Linux kernel contains a use-after-free vulnerability caused by inconsistent kthread exit paths leading to dangling pointers in kthread_affinity_list, letting attackers cause kernel crashes, exploit requires triggering kthread exit.

Severity & Score

Impact

Attackers can cause kernel crashes and potential denial of service by exploiting use-after-free in kthread exit handling.

Mitigation

Update to the latest Linux kernel version containing the consolidated kthread exit path fix.

References

• https://git.kernel.org/stable/c/28aaa9c39945b7925a1cc1d513c8f21ed38f5e4f
• https://git.kernel.org/stable/c/4729c7b00a347fd37d0cbc265b85f2884c3e06b6
• https://git.kernel.org/stable/c/5a591d7a5e48d30100943940a30a6ab41b15c672

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner