PT-2026-39049 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-15 · CVE-2026-43388

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the damos walk() function where ctx->walk control is set to a caller-provided control structure before verifying if the context is running. If the context is inactive, the function returns an error without clearing ctx->walk control, leaving a dangling pointer to a stack-allocated structure. This can lead to a use-after-free scenario if the context is started and kdamond dereferences the pointer, or result in a permanent -EBUSY error during subsequent damos walk() calls because the pointer remains non-NULL.

Recommendations Clear ctx->walk control under walk control lock before returning -EINVAL in the damos walk() function.

Related Identifiers

CVE-2026-43388

Affected Products

Linux Kernel

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-43388 · Security Note
• https://twitter.com/CVEnew/status/2052767696308388213 · Twitter Post
• https://git.kernel.org/stable/c/9320c77134ab8d7701e20608bbf08517df4fa321 · Note
• https://twitter.com/infoflowcloud/status/2052769664313237512 · Twitter Post
• https://git.kernel.org/stable/c/ce0aa47c963b8c3e5beace89e2b5a665a64b5b6b · Note
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post
• https://git.kernel.org/stable/c/d210fdcac9c0d1380eab448aebc93f602c1cd4e6 · Note