PT-2026-37419 · Linux · Linux Kernel

김영민 · Published 2026-05-06 · Updated 2026-05-06 · CVE-2026-43109

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the x86 shadow stacks implementation where the shstk pop sigframe() function fails to check for errors returned by mmap read lock killable(). This occurs because the function was not marked with must check, which is a compiler attribute used to ensure that the return value of a function is not ignored.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43109

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-43109 · Security Note
• https://git.kernel.org/stable/c/262b6d38a81d51b135db81e1f30c13d30e38feee · Patch
• https://git.kernel.org/stable/c/c64cebcc5c4f223dbcbe7dcdf74908fc092a0aa4 · Patch
• https://git.kernel.org/stable/c/52f657e34d7b21b47434d9d8b26fa7f6778b63a0 · Patch
• https://twitter.com/VulmonFeeds/status/2052002748371960124 · Twitter Post
• https://t.me/CVEtracker/52832 · Telegram Post
• https://twitter.com/vuldb/status/2051988890559664471 · Twitter Post