CVE-2026-43115

Source
https://cve.org/CVERecord?id=CVE-2026-43115
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43115.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-43115
Downstream
BELL (1)
CGA (56)
DEBIAN (1)
OESA (1)
ROOT (5)
UBUNTU (1)
Published
2026-05-06T07:40:40Z
Modified
2026-10-24T02:36:27Z
Summary
srcu: Use irq_work to start GP in tiny SRCU
Details

In the Linux kernel, the following vulnerability has been resolved:

srcu: Use irq_work to start GP in tiny SRCU

Tiny SRCU's srcu_gp_start_if_needed() directly calls schedule_work(), which acquires the workqueue pool->lock.

This causes a lockdep splat when call_srcu() is called with a scheduler lock held, due to:

call_srcu() [holding pi_lock] srcu_gp_start_if_needed() schedule_work() -> pool->lock

workqueue_init() / create_worker() [holding pool->lock] wake_up_process() -> try_to_wake_up() -> pi_lock

Also add irq_work_sync() to cleanup_srcu_struct() to prevent a use-after-free if a queued irq_work fires after cleanup begins.

Tested with rcutorture SRCU-T and no lockdep warnings.

[ Thanks to Boqun for similar fix in patch "rcu: Use an intermediate irq_work to start process_srcu()" ]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43115.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d8be81735aa89413b333de488251f0e64e2be591
Fixed
20b98d9ffb09763048a7c84b47403eb0f177272c
Fixed
2127e6b79d9d579ea538a350d1bbe859e39814d5
Fixed
28768bc7ea0b13f558a70f63cc3cfcd32d55d488
Fixed
bb37286db65368cb72ba8757ad86299c4e4a73fc
Fixed
a6fc88b22bc8d12ad52e8412c667ec0f5bf055af

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43115.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.12.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.14

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43115.json"