Shadow Stacks Vulnerability in Linux Kernel Affecting Multiple Versions

CVE-2026-43109

What is CVE-2026-43109?

The Linux kernel has been identified with a vulnerability within the shadow stack implementation, specifically related to improper error handling during the memory mapping process. The function shstk_pop_sigframe() fails to adequately check for errors from mmap_read_lock_killable(). This oversight not only compromises the robustness of error detection but also highlights the lack of appropriate annotations, such as __must_check, in related functions. Recent updates have rectified these issues, enhancing overall system integrity and resilience against potential exploitation.

References