CVE-2026-43417

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Handle vfork()/CLONE_VM correctly Matthieu and Jiri reported stalls where a task endlessly loops in mm_get_cid() when scheduling in. It turned out that the logic which handles vfork()'ed tasks is broken. It is invoked when the number of tasks associated to a process is smaller than the number of MMCID users. It then walks the task list to find the vfork()'ed task, but accounts all the already processed tasks as well. If that double processing brings the number of to be handled tasks to 0, the walk stops and the vfork()'ed task's CID is not fixed up. As a consequence a subsequent schedule in fails to acquire a (transitional) CID and the machine stalls. Cure this by removing the accounting condition and make the fixup always walk the full task list if it could not find the exact number of users in the process' thread list.

• https://git.kernel.org/stable/c/28b5a1395036d6c7a6c8034d85ad3d7d365f192cPatch
• https://git.kernel.org/stable/c/e6761cdce78a8919a537989afb6aaf6881469f83Patch

Published

May 8, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-43411In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43412In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43413In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43414In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-43415In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2026-43416In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43418In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43419In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-4342A security issue was discovered in ingress-nginx where a com…8.8
• CVE-2026-43420In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2026-43421In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43422Rejected reason: This CVE ID has been rejected or withdrawn …