CVE-2026-43115

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

In the Linux kernel, the following vulnerability has been resolved:

srcu: Use irq work to start GP in tiny SRCU

Tiny SRCU's srcu gp start if needed() directly calls schedule work(), which acquires the workqueue pool->lock.

This causes a lockdep splat when call srcu() is called with a scheduler lock held, due to:

call srcu() [holding pi lock] srcu gp start if needed() schedule work() -> pool->lock

workqueue init() / create worker() [holding pool->lock] wake up process() -> try to wake up() -> pi lock

Also add irq work sync() to cleanup srcu struct() to prevent a use-after-free if a queued irq work fires after cleanup begins.

Tested with rcutorture SRCU-T and no lockdep warnings.

[ Thanks to Boqun for similar fix in patch "rcu: Use an intermediate irq work to start process srcu()" ]

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-43115

Linux