Linux Kernel Vulnerability in rtmutex Component Affecting Multiple Versions

CVE-2026-43499

What is CVE-2026-43499?

A vulnerability exists in the Linux kernel's rtmutex component where the remove_waiter() function incorrectly utilizes current instead of waiter::task during a dequeue operation within various mutex handling paths. This mismanagement leads to multiple issues, including potential use-after-free vulnerabilities due to dangling pointers and improper priority management across tasks. The implications of this vulnerability necessitate careful attention to maintain system integrity and security.

References