CVE-2026-43438
medium
Red Hat EPSS Score
0.0%
Exploitation probability in 30 days
Top 95% most likely to be exploited
Vulnerability Report
Generated by CyberWatcher
Description
A flaw was found in the Linux kernel's sched_ext component. This vulnerability is caused by a redundant `css_put()` call in the `scx_cgroup_init()` function, leading to a reference count underflow. This can result in a Use-After-Free (UAF) vulnerability, potentially allowing a local attacker to cause a denial of service or achieve privilege escalation.
CWE
CWE-1341Affected Products
Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9