Scheduler Lock Vulnerability in Linux Kernel Affecting Work Queue Process

CVE-2026-43115

What is CVE-2026-43115?

A vulnerability has been identified in the Linux kernel related to the tiny SRCU that can lead to potential deadlocks due to improper locking mechanisms. Specifically, the 'srcu_gp_start_if_needed()' function calls 'schedule_work()' while holding a scheduler lock, causing a lock dependency issue when 'call_srcu()' is invoked. Additionally, a potential use-after-free vulnerability may occur if a queued irq_work is triggered after the cleanup has started. Mitigation steps that have been tested effectively prevent these issues, ensuring smoother operation and enhanced security.

References