CVE-2026-43499
rtmutex: Use waiter::task instead of current in remove_waiter()
CVSS 3.1Medium
7.8/ 10.0
Опубликовано
Обновлено
В атаках
Не зафиксировано
Публичный PoC
Отсутствует
Анализ подготовлен:CVE Futuretools Threat Intelligence
Верификация: MITRE CVE List · CISA KEV · NIST NVD
ОФИЦИАЛЬНЫЙ ПАТЧ НЕ ОПУБЛИКОВАН
Обновить ядро Linux до версии, содержащей коммит с заменой current на waiter::task в remove_waiter().
01 // ТЕХНИЧЕСКАЯ СУТЬ УЯЗВИМОСТИ
Состояние гонки и UAF в ядре Linux из-за некорректного указателя задачи в remove_waiter().
02 // АНАТОМИЯ АТАКИ И ДЕФЕКТ ЛОГИКИ
Функция remove_waiter() при откате прокси-блокировки из futex_requeue() через rt_mutex_start_proxy_lock() ошибочно оперирует current вместо waiter::task. Извлечение из rbtree происходит без удержания pi_lock, статус pi_blocked_on не сбрасывается, а rt_mutex_adjust_prio_chain() получает неверный приоритет.
03 // СИСТЕМНЫЕ ПОСЛЕДСТВИЯ
Появление повисшего указателя с риском Use-After-Free (UAF), повреждение структур очередей и сбой механизма наследования приоритетов ядра.
04 // МАТРИЦА ЗАТРОНУТЫХ ПАКЕТОВ
Точные диапазоны версий не зафиксированы в источниках
05 // ПЕРВОИСТОЧНИКИ И БЮЛЛЕТЕНИ (188)
- git.kernel.orghttps://git.kernel.org/stable/c/f3fa3424bceb128d2be4b3745506b22844b87db7
- git.kernel.orghttps://git.kernel.org/stable/c/838ce5cb5d93c3ab8b27e75bc6ad905a94b752fd
- git.kernel.orghttps://git.kernel.org/stable/c/d8cce4773c2b23d819baf5abedc62f7b430e8745
- git.kernel.orghttps://git.kernel.org/stable/c/8a1fc8d698ac5e5916e3082a0f74450d71f9611f
- git.kernel.orghttps://git.kernel.org/stable/c/6d52dfcb2a5db86e346cf51f8fcf2071b8085166
- git.kernel.orghttps://git.kernel.org/stable/c/3fb7394a837740770f0d6b4b30567e60786a63f2
- git.kernel.orghttps://git.kernel.org/stable/c/88614876370aac8ad1050ad785a4c095ba17ac11
- git.kernel.orghttps://git.kernel.org/stable/c/3bfdc63936dd4773109b7b8c280c0f3b5ae7d349
- github.comhttps://github.com/0xBlackash/CVE-2026-43499
- github.comhttps://github.com/1ndevelopment/ghostlock-s26
- github.comhttps://github.com/233laoliu/mt6985-CVE-2026-43499
- github.comhttps://github.com/2932796375github/CVE-2026-43499_OPPO-MT6835
- github.comhttps://github.com/AriyanPegu/ghostlock-app
- github.comhttps://github.com/AuroraMythweaver/iqoo-neo9-ghostlock-pc
- github.comhttps://github.com/BH3GEI/honor-aap-an00-root-skill
- github.comhttps://github.com/Bailan766/rmx3888-cve-2026-43499-config
- github.comhttps://github.com/Bartixxx32/CVE-2026-43499-OnePlus15
- github.comhttps://github.com/Bobikl/CVE-2026-43499-T807D
- github.comhttps://github.com/BuSung-dev/CVE-2026-43499-S25U
- github.comhttps://github.com/BuSung-dev/Root-My-Galaxy
- github.comhttps://github.com/Bugel/cve-2026-43499-m3q-azf1
- github.comhttps://github.com/CKwasd/zenfone9-ghostlock
- github.comhttps://github.com/CakesTwix/Android-CVE-2026-43499
- github.comhttps://github.com/CamsShaft/IonStack-S22-cve-2026-43499
- github.comhttps://github.com/CatXiaoShi/cve-2026-43499
- github.comhttps://github.com/Colorful-glassblock/duchamp-root
- github.comhttps://github.com/Cxyofficial/K50G-POCOF4GT-CVE-2026-43499-PoC
- github.comhttps://github.com/Cxyofficial/x200-cve-2026-43499
- github.comhttps://github.com/DeAurity/ghost-hoock
- github.comhttps://github.com/E-R-Butch/F9360-CVE43499
- github.comhttps://github.com/Escosis/V2463A-LPE
- github.comhttps://github.com/GrandFuzard/redmi-13-5g-ghostlock-findings
- github.comhttps://github.com/HORKimhab/CVE-2026-43499
- github.comhttps://github.com/HYCQAQ/Logitech-G-Cloud-GhostLock-CVE-2026-43499
- github.comhttps://github.com/JoinChang/ghostlock-oneplus
- github.comhttps://github.com/Kananosa/CVE-2026-43499-For-Xiaomi-17T-chagall
- github.comhttps://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis
- github.comhttps://github.com/Linuxoid-cn/Mi8E5-Unlocker-by-CVE-2026-43499
- github.comhttps://github.com/MSEDGE-CORE/GhostLock-HonorFne
- github.comhttps://github.com/Meowkis/tcp-zerocopy-sm
- github.comhttps://github.com/MiaPatsune/cve-2026-43499
- github.comhttps://github.com/MobiusM/CVE-2026-43499
- github.comhttps://github.com/MuhamadRifkii/CVE-2026-43499-POCO-X3-GT
- github.comhttps://github.com/NanoTurtle1145/root-my-s24
- github.comhttps://github.com/Nixbones/ghostlock-rmx5085
- github.comhttps://github.com/No-22-Github/UnPlus
- github.comhttps://github.com/NothingFumo/ghostlock-aresin
- github.comhttps://github.com/OhLookItsTheIRS/Root-My-Galaxy-tests
- github.comhttps://github.com/PeronGH/ghostlock-selinux-disabler
- github.comhttps://github.com/Petalrain224/CVE-2026-43499-Redmi-Turbo5
- github.comhttps://github.com/R0rt1z2/GhostLock
- github.comhttps://github.com/RELIHR/CVE-2026-43499
- github.comhttps://github.com/ReBiliBin/ghostlock-oppo-watch3pro
- github.comhttps://github.com/RetributionByRevenue/motogstylus2023-root
- github.comhttps://github.com/RetributionByRevenue/xperia1vi-root
- github.comhttps://github.com/Romk-a/CVE-2026-43499-ghostlock-vivo-x100-ultra-root
- github.comhttps://github.com/SammyEnigma/CVE-2026-43499-S26
- github.comhttps://github.com/SetsuNeko/GhostLock_MT6983V_5.10
- github.comhttps://github.com/Syerain/cve-2026-43499-vivo-mt6896
- github.comhttps://github.com/THORBHAIxTRUSTED/RootMyVivo-Exploit
- github.comhttps://github.com/TheAndersMadsen/humane-aipin-ghostlock
- github.comhttps://github.com/Venshell/hlk-al00-kernel-build
- github.comhttps://github.com/WJNKAC/CVE-2026-43499-OPPO-A5-PBBT30
- github.comhttps://github.com/WitAqua-tools/Root-My-Device
- github.comhttps://github.com/Wtrwx/smt878u-ionstack-poc
- github.comhttps://github.com/XiaoBaiLovesStirring/ghostlock-custom
- github.comhttps://github.com/XiaoBaiLovesStirring/ghostlock-k419-adapter
- github.comhttps://github.com/XingChenRS/CyberMeowfiaNS
- github.comhttps://github.com/YUE546/IQOO-neo7-ghostlock-43499
- github.comhttps://github.com/YuKongA/ghostlock-app
- github.comhttps://github.com/ZeroDayEvil/CVE-2026-43499
- github.comhttps://github.com/a23bc/ALI-AN00-cve-2026-43499
- github.comhttps://github.com/abdgalaxy36-code/rmgp-complete-handoff
- github.comhttps://github.com/accessmodifier364/cve-2026-43499-firetv-sheldonp-writeup
- github.comhttps://github.com/adam-ikari/ghostlock-site
- github.comhttps://github.com/alex193a/Root-My-Pixel
- github.comhttps://github.com/alfzki/ghostlock-app
- github.comhttps://github.com/alk601/Root-My-Galaxy
- github.comhttps://github.com/ankitrawatgit/iQOO-Z9_5G-vivo-T3_5G-Root-GhostLock
- github.comhttps://github.com/anksgls-sj/-Help-vivo-Y200i-5.10.218-GKI-CVE-2026-43499-stack-reclaim-reaches-0x300-need-0x318
- github.comhttps://github.com/asarr22/Root-My-Galaxy-S938B
- github.comhttps://github.com/boxiaolanya2008/CVE-2026-43499-Neo11Plus
- github.comhttps://github.com/caspy123/CVE-2026-43499
- github.comhttps://github.com/ccp-p/ghostlock-cve-2026-43499-4.19-k40
- github.comhttps://github.com/crastatelvin/a12-ghostlock
- github.comhttps://github.com/ctn-Qvo/CVE-2026-43499-so-build
- github.comhttps://github.com/ctn-Qvo/auto_extract_offsets
- github.comhttps://github.com/cuteaplane/GhostLock-for-OnePlus15T
- github.comhttps://github.com/cxlfhx/ghostlock-pfem10
- github.comhttps://github.com/cyberbalsa/GhostLock-NVIDIA-Shield-9.2.4
- github.comhttps://github.com/cyrrp/honor90-ghostlock
- github.comhttps://github.com/d16ug-a1l/REDMI_Root
- github.comhttps://github.com/datfooldive/ghostlock-emerald
- github.comhttps://github.com/deancyl/s9180-rootmygalaxy
- github.comhttps://github.com/dmcdtc/openvz-cve-patch-2026
- github.comhttps://github.com/dnlid/CVE-2026-43499
- github.comhttps://github.com/dorlow/hazel-cve-2026-43499
- github.comhttps://github.com/eroorvbsyes-hotmail/CVE-2026-43499_x86_Exploit
- github.comhttps://github.com/fancyzll/CVE-2026-43499_OPPO-MT6835
- github.comhttps://github.com/fusiondrive/CVE-2026-43499-A36
- github.comhttps://github.com/fusiondrive/CVE-2026-43499-S24U
- github.comhttps://github.com/fusiondrive/CVE-2026-43499-ZFOLD4
- github.comhttps://github.com/gagaltotal/CVE-2026-43499-PoC-Scanner
- github.comhttps://github.com/genksome/ghost-hoock
- github.comhttps://github.com/gitchw/ghostlock-cve-2026-43499
- github.comhttps://github.com/hackyangwen-lgtm/rmg-s9180-fzg1
- github.comhttps://github.com/hmascs/KSuRoot
- github.comhttps://github.com/huaguiqi/asus-i005-cve-2026-43499
- github.comhttps://github.com/hui191/cve-2026-43499-aak-an00
- github.comhttps://github.com/hybLOVE/iqoo-temp-root
- github.comhttps://github.com/imeiplus/galaxy-a37-root
- github.comhttps://github.com/imeiplus/ghostlock-pfem10
- github.comhttps://github.com/inforcqb-self/CVE-2026-43499-pja110
- github.comhttps://github.com/jason5545/ghostlock-myron-tw
- github.comhttps://github.com/joehquak/Mi8E5-Unlocker-by-CVE-2026-43499
- github.comhttps://github.com/justsoman/CVE-2026-43499-jinghu
- github.comhttps://github.com/justsoman/CyberMeowfia-ace3
- github.comhttps://github.com/k-o-n-t-o-r/ghostlock-sabrina
- github.comhttps://github.com/k-o-n-t-o-r/ghostlock-sm-g990b
- github.comhttps://github.com/knowlily/cve-2026-43499-honor
- github.comhttps://github.com/kurtulusakyuz/IonStack_S21
- github.comhttps://github.com/li-dahua/s25u-ghostlock-kernelsu-lkm
- github.comhttps://github.com/linux-tools/VIVO-IQOO-Neo9-Root-Tools
- github.comhttps://github.com/lkeld/CVE-2026-43499-poc
- github.comhttps://github.com/maulanasdqn/ghostlock-honor-brpnx1
- github.comhttps://github.com/mo2g/redmi-note-12t-pro-kernel
- github.comhttps://github.com/mobilehackinglab/ghostlock-a17
- github.comhttps://github.com/mouseos/aquos-r6-ghostlock
- github.comhttps://github.com/mumaosong/cve-2026-43499-CyberMeowfia
- github.comhttps://github.com/newazbenalam/Root-My-Galaxy-Payloads
- github.comhttps://github.com/onesmiledx/CVE-2026-43499
- github.comhttps://github.com/oopnv70-lab/ghostlock-aak-apk
- github.comhttps://github.com/oopnv70-lab/ghostlock-apk
- github.comhttps://github.com/oopnv70-lab/ghostlock-honor-aak
- github.comhttps://github.com/oopnv70-lab/ghostlock-honor-aak-probe
- github.comhttps://github.com/p2p3p/GhostLock-for-OnePlus
- github.comhttps://github.com/pimpamebanihah/cve-2026-43499-app.s0
- github.comhttps://github.com/pimpamebanihah/cve-2026-43499-app.so
- github.comhttps://github.com/poisongod/BakaSU-PostLock
- github.comhttps://github.com/pubglite55/findn2-ksu-chain
- github.comhttps://github.com/quillfinch/Galaxy-Tab-S10FE-Root
- github.comhttps://github.com/rsyzee/ghostlock-infinix-hot70
- github.comhttps://github.com/ruik-tech/ghostlock-s25fe
- github.comhttps://github.com/saltlyfish666/magicpad3-root-research
- github.comhttps://github.com/sarabpal-dev/IonStack-S22U
- github.comhttps://github.com/sgswzglwlx/vivo-root-build
- github.comhttps://github.com/shangu2003/SamsungRootKit
- github.comhttps://github.com/shubhampathak65/CVE-2026-43499
- github.comhttps://github.com/slapah/ghostlock-h8q
- github.comhttps://github.com/snothin/ghostlock-s26
- github.comhttps://github.com/soralis0912/CVE-2026-43499-aristotle
- github.comhttps://github.com/soralis0912/CVE-2026-43499-aristotle-apk
- github.comhttps://github.com/soralis0912/CVE-2026-43499-pmg110-root
- github.comhttps://github.com/soralis0912/CVE-2026-43499-warhol-root
- github.comhttps://github.com/soralis0912/Root-My-Device
- github.comhttps://github.com/sorrow404Null/CVE-2026-43499-RMX5200
- github.comhttps://github.com/suominen/ghostlock
- github.comhttps://github.com/tc3650/CVE-2026-43499-armv7
- github.comhttps://github.com/theboringhumane/Root-My-Galaxy-Payloads-SM-S928B
- github.comhttps://github.com/tingao/debian-on-s23-ultra
- github.comhttps://github.com/tokenbleed/ghostlock-tv
- github.comhttps://github.com/veygax/HORiZonstack
- github.comhttps://github.com/villager1314/CVE-2026-43499-Analysis
- github.comhttps://github.com/vn-ncvinh/CVE-2026-43499-OPPO-6.12.58
- github.comhttps://github.com/wazzuj99-svg/Root-My-Galaxy
- github.comhttps://github.com/wonjj6768/Lenovo-TB365FC-GhostLock-CVE-2026-43499
- github.comhttps://github.com/woshimaniubi8/CVE-2026-43499-root-KernelSU
- github.comhttps://github.com/wxxsfxyzm/GhostLock-Galaxy
- github.comhttps://github.com/wzhdgithub/GhostLock
- github.comhttps://github.com/x-spy/CVE-2026-43499-popsicle
- github.comhttps://github.com/xianwan1314/CVE-2026-43499-Poc-Analysis
- github.comhttps://github.com/xiaohj233/ghostlock-x200-app
- github.comhttps://github.com/xiaohj233/ghostlock-x200-root
- github.comhttps://github.com/xrzcc/s26-m1q-ghostlock-selinux
- github.comhttps://github.com/xyxdaily/oppo-pgem10-ghostlock-cve
- github.comhttps://github.com/yakidango-official/GhostLock-H80GT
- github.comhttps://github.com/yexiaoqq/rmg-s9110-research
- github.comhttps://github.com/yichen115/ghostlock-kirkwood
- github.comhttps://github.com/yijiacloud/GhostLock-OPPO-PCKM00
- github.comhttps://github.com/yijiacloud/ghostlock-cve-2026-43499-4.19-k40
- github.comhttps://github.com/ymh001/meizu21-ghostlock-root
- github.comhttps://github.com/zenyxx-xd/RootMyVivo
- github.comhttps://github.com/zenyxx-xd/RootMyVivo-Exploit
- github.comhttps://github.com/zero2005x/rokid-rv101-research
- github.comhttps://github.com/zhubaohe123/ghostlock-kit
- github.comhttps://github.com/zimza1abim/Root-My-Galaxy-Payloads-SM-S928N
- github.comhttps://github.com/zychen027/CVE-2026-43499_HW-CLT-AL01
- github.comhttps://github.com/zzzxxxxxxxxxx/GhostLock-GOT-W29
06 // ЦИТИРОВАНИЕ ДАННЫХ И ИСТОЧНИК
Для включения аналитической карточки в отчёты по безопасности, матрицы рисков или исследовательские публикации используйте стандартизированный формат цитирования:
Библиографическая ссылка (Plain text)
CVE Futuretools (2026). Анализ уязвимости CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter(). URL: https://cve.futuretools.ru/cve/CVE-2026-43499
BibTeX формат (LaTeX)
@misc{cve_futuretools_cve_2026_43499,
title = {{CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter()}},
author = {{CVE Futuretools}},
year = {2026},
howpublished = {\url{https://cve.futuretools.ru/cve/CVE-2026-43499}},
note = {Оперативный инженерный анализ киберугроз}
}