Detections
Analytics
CVE-2026-43499
high
Description
In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slowlock paths, but it is also used for proxy-lock rollback in rt_mutex_start_proxy_lock() when invoked from futex_requeue(). In the latter case waiter::task is not current, but remove_waiter() operates on current for the dequeue operation. That results in several problems: 1) the rbtree dequeue happens without waiter::task::pi_lock being held 2) the waiter task's pi_blocked_on state is not cleared, which leaves a dangling pointer primed for UAF around. 3) rt_mutex_adjust_prio_chain() operates on the wrong top priority waiter task Use waiter::task instead of current in all related operations in remove_waiter() to cure those problems. [ tglx: Fixup rt_mutex_adjust_prio_chain(), add a comment and amend the changelog ]
References
https://github.com/newazbenalam/Root-My-Galaxy-Payloads
https://github.com/genksome/ghost-hoock
https://github.com/accessmodifier364/cve-2026-43499-firetv-sheldonp-writeup
https://github.com/zhubaohe123/ghostlock-kit
https://github.com/huaguiqi/asus_i005-CVE-2026-43499
https://github.com/1ndevelopment/ghostlock-s26
https://github.com/hui191/cve-2026-43499-aak-an00
https://github.com/zenyxx-xd/RootMyVivo-Exploit
https://github.com/cyberbalsa/GhostLock-NVIDIA-Shield-9.2.4
https://github.com/abdgalaxy36-code/galaxy-a37-root
https://github.com/ruik-tech/ghostlock-s25fe
https://github.com/oopnv70-lab/ghostlock-aak-apk
https://github.com/xiaohj233/ghostlock-x200-app
https://github.com/alk601/Root-My-Galaxy
https://github.com/ReBiliBin/ghostlock-oppo-watch3pro
https://github.com/diyiqiuye/ghostlock-pfem10
https://github.com/hackyangwen-lgtm/rmg-s9180-fzg1
https://github.com/sgswzglwlx/vivo-root-build
https://github.com/zenyxx-xd/RootMyVivo
https://github.com/XiaoBaiLovesStirring/ghostlock-k419-adapter
https://github.com/XingChenRS/CyberMeowfiaNS
https://github.com/ankitrawatgit/iQOO-Z9_5G-vivo-T3_5G-Root-GhostLock
https://github.com/snothin/ghostlock-s26
https://github.com/villager1314/CVE-2026-43499-IQOO-Neo10-Analysis
https://github.com/SetsuNeko/GhostLock_MT6983V_5.10
https://github.com/xrzcc/s26-m1q-ghostlock-selinux
https://github.com/XiaoBaiLovesStirring/ghostlock-custom
https://github.com/zychen027/CVE-2026-43499_HW-CLT-AL01
https://github.com/R0rt1z2/GhostLock-5.10
https://github.com/R0rt1z2/GhostLock
https://github.com/NanoTurtle1145/root-my-s9280
https://github.com/NanoTurtle1145/root-my-s24
https://github.com/knowlily/cve-2026-43499-honor
https://github.com/fusiondrive/CVE-2026-43499-ZFOLD4
https://github.com/hmascs/KSuRoot
https://github.com/Bugel/cve-2026-43499-m3q-azf1
https://github.com/wzhdgithub/GhostLock
https://github.com/hybLOVE/iqoo-temp-root
https://github.com/E-R-Butch/F9360-CVE43499
https://github.com/xiaohj233/ghostlock-x200-root
https://github.com/oopnv70-lab/ghostlock-apk
https://github.com/zzzxxxxxxxxxx/GhostLock-GOT-W29
https://github.com/OhLookItsTheIRS/Root-My-Galaxy-tests
https://github.com/ruik-tech/Root-My-Galaxy
https://github.com/sarabpal-dev/IonStack-S22U
https://github.com/wxxsfxyzm/GhostLock-Galaxy
https://github.com/Meowkis/tcp-zerocopy-sm
https://github.com/oopnv70-lab/ghostlock-honor-aak
https://github.com/taoubi1/ghostlock-sm-a155f
https://github.com/eroorvbsyes-hotmail/CVE-2026-43499_x86_Exploit
https://github.com/alex193a/Root-My-Pixel
https://github.com/alex193a/Root-My-Pixel-Payloads
https://github.com/veygax/HORiZonstack
https://github.com/fusiondrive/CVE-2026-43499-A36
https://github.com/CatXiaoShi/cve-2026-43499
https://github.com/NothingFumo/ghostlock-aresin
https://github.com/datfooldive/ghostlock-emerald
https://github.com/LuZe0y/pd2425-cve-2026-43499-config
https://github.com/2932796375github/CVE-2026-43499_OPPO-MT6835
https://github.com/233laoliu/mt6985-CVE-2026-43499
https://github.com/YuKongA/ghostlock-app
https://github.com/Witaqua-tools/Root-My-Device
https://github.com/WitAqua-tools/Root-My-Device
https://github.com/KawaiiHachimi/CVE-2026-43499-pkb110
https://github.com/soralis0912/CVE-2026-43499-pmg110-root
https://github.com/woshimaniubi8/CVE-2026-43499-root-KernelSU
https://github.com/xingguangcuican6666/ABK_CVE_Fix_Module
https://github.com/fusiondrive/CVE-2026-43499-S24U
https://github.com/No-22-Github/UnPlus
https://github.com/cuteaplane/GhostLock-for-OnePlus15T
https://github.com/mumaosong/cve-2026-43499-CyberMeowfia
https://github.com/Bailan766/rmx3888-cve-2026-43499-config
https://github.com/soralis0912/CVE-2026-43499-aristotle-apk
https://github.com/soralis0912/CVE-2026-43499-aristotle
https://github.com/DistrictBlauw/Ace3-GhostLock-Preload
https://github.com/geecjdj/CVE-2026-43499
https://github.com/Kananosa/CVE-2026-43499-For-Xiaomi-17T-chagall
https://github.com/d224407/CVE-2026-43499
https://github.com/p2p3p/GhostLock-for-OnePlus
https://github.com/PeronGH/ghostlock-selinux-disabler
https://github.com/fuukliam/vivo-x-fold6-ghostlock
https://github.com/BuSung-dev/Root-My-Galaxy
https://github.com/sorrow404Null/CVE-2026-43499-RMX5200
https://github.com/ayyy7128/CVE-2026-43499-jinghu
https://github.com/DistrictBlauw/CyberMeowfia-ace3
https://github.com/SlightNeko/ghostlock-rothko
https://github.com/onesmiledx/CVE-2026-43499
https://github.com/Colorful-glassblock/duchamp-root
https://github.com/HYCQAQ/Logitech-G-Cloud-GhostLock-CVE-2026-43499
https://github.com/qsvggff-spec/oppo-A5-PRO-5G-CVE-2026-43499
https://github.com/Bartixxx32/CVE-2026-43499-OnePlus15
https://github.com/Thiasap/oppo-pgem10-ghostlock
https://github.com/Yakayna/SpringPeace
https://github.com/joehquak/Mi8E5-Unlocker-by-CVE-2026-43499
https://github.com/Linuxoid-cn/Mi8E5-Unlocker-by-CVE-2026-43499
https://github.com/JoinChang/ghostlock-oneplus
https://github.com/dmcdtc/openvz-cve-patch-2026
https://github.com/x-spy/CVE-2026-43499-popsicle
https://github.com/caspy123/CVE-2026-43499
https://github.com/inforcqb/CVE-2026-43499-pja110
https://github.com/pubglite55/oppo-ghostlock
https://github.com/suominen/ghostlock
https://github.com/0xBlackash/CVE-2026-43499
https://github.com/HORKimhab/CVE-2026-43499
https://github.com/NebuSec/CyberMeowfia
https://github.com/Unclecheng-li/poc-lab
https://github.com/KaraZajac/SKELETONKEY
https://git.kernel.org/stable/c/f3fa3424bceb128d2be4b3745506b22844b87db7
https://git.kernel.org/stable/c/d8cce4773c2b23d819baf5abedc62f7b430e8745
https://git.kernel.org/stable/c/8a1fc8d698ac5e5916e3082a0f74450d71f9611f
https://git.kernel.org/stable/c/88614876370aac8ad1050ad785a4c095ba17ac11
https://git.kernel.org/stable/c/838ce5cb5d93c3ab8b27e75bc6ad905a94b752fd
https://git.kernel.org/stable/c/6d52dfcb2a5db86e346cf51f8fcf2071b8085166
https://git.kernel.org/stable/c/3fb7394a837740770f0d6b4b30567e60786a63f2
https://git.kernel.org/stable/c/3bfdc63936dd4773109b7b8c280c0f3b5ae7d349
https://cert-portal.siemens.com/productcert/html/ssa-019113.html