01 Record

CVE-2026-43439

cgroup: fix race between task migration and iteration

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

cgroup: fix race between task migration and iteration

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.09% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 0.5% of scored records. A rank, not a probability.
NVD base score: 4.7 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-05-08 14:22Z3 MO AGO

Last updated

2026-05-23 16:07Z3 MO AGO

Reserved

2026-05-01

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class
CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionBase

Data version

5.2

Document digest

7b379fbe26506d17fafb68399d7aba8f2f8b1adc4d11d196831b51bbef86e00b

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxb636fd38dc40113f853337a7d2a6885ad23b8811 to < 7c85debc35e6d131bd29c64f2ae78c6ede0e55c4, b636fd38dc40113f853337a7d2a6885ad23b8811 to < 3b95abab7369235a37b15eaec6e1a0b443bba7c7, b636fd38dc40113f853337a7d2a6885ad23b8811 to < 4a9654a2b46cfdaae287fb8995f536245635e467, b636fd38dc40113f853337a7d2a6885ad23b8811 to < 3dfd1328c05234e8d8fa61948b2ba82680594988, b636fd38dc40113f853337a7d2a6885ad23b8811 to < 9cca530c7cc1b3e02cb8fa7f80060dd4b38562ce, b636fd38dc40113f853337a7d2a6885ad23b8811 to < 86ceaccfdfa16dad05addb33dc206e03589bcfd1, b636fd38dc40113f853337a7d2a6885ad23b8811 to < 9dc76f6fc0d28d2382583715bc4ec22f28104845, b636fd38dc40113f853337a7d2a6885ad23b8811 to < 5ee01f1a7343d6a3547b6802ca2d4cdce0edacb1, b0af004fd58ded5f898630db008c5b824c27d7db, 370b9e6399da09fe10005fe455878b356de7b85f, 4.14.138 to < 4.15, 4.19.66 to < 4.20, 5.2—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/7c85debc35e6d131bd29c64f2ae78c6ede0e55c4
git.kernel.orghttps://git.kernel.org/stable/c/3b95abab7369235a37b15eaec6e1a0b443bba7c7
git.kernel.orghttps://git.kernel.org/stable/c/4a9654a2b46cfdaae287fb8995f536245635e467
git.kernel.orghttps://git.kernel.org/stable/c/3dfd1328c05234e8d8fa61948b2ba82680594988
git.kernel.orghttps://git.kernel.org/stable/c/9cca530c7cc1b3e02cb8fa7f80060dd4b38562ce
git.kernel.orghttps://git.kernel.org/stable/c/86ceaccfdfa16dad05addb33dc206e03589bcfd1
git.kernel.orghttps://git.kernel.org/stable/c/9dc76f6fc0d28d2382583715bc4ec22f28104845
git.kernel.orghttps://git.kernel.org/stable/c/5ee01f1a7343d6a3547b6802ca2d4cdce0edacb1

01 Record index

CVE-2026-43439

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-43439

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References