CVE-2026-43124

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43124
In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In persistent_ram_vmap(), vmap() may return NULL on failure. If offset is non-zero, adding offset_in_page(start) causes the function to return a non-NULL pointer even though the mapping failed. persistent_ram_buffer_map() therefore incorrectly returns success. Subsequent access to prz->buffer may dereference an invalid address and cause crashes. Add proper NULL checking for vmap() failures.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9 Patch
https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003 Patch
https://git.kernel.org/stable/c/2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb Patch
https://git.kernel.org/stable/c/49918dd52615097529811d21ec6074dd02ebe77c Patch
https://git.kernel.org/stable/c/88d5b28f63c7aac1271784e3b800ed405d1cde75 Patch
https://git.kernel.org/stable/c/8baa234181f632cabacf73e4834a910859e9fcc9 Patch
https://git.kernel.org/stable/c/8d849adfbc3e98417fb541620568db1a759ef441 Patch
https://git.kernel.org/stable/c/d47234840aeb4182ed3ee795c578b1dfa9cbd25b Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

08 May 2026, 18:02

Type Values Removed Values Added
CWE CWE-476
References () https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9 - () https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9 - Patch
References () https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003 - () https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003 - Patch
References () https://git.kernel.org/stable/c/2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb - () https://git.kernel.org/stable/c/2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb - Patch
References () https://git.kernel.org/stable/c/49918dd52615097529811d21ec6074dd02ebe77c - () https://git.kernel.org/stable/c/49918dd52615097529811d21ec6074dd02ebe77c - Patch
References () https://git.kernel.org/stable/c/88d5b28f63c7aac1271784e3b800ed405d1cde75 - () https://git.kernel.org/stable/c/88d5b28f63c7aac1271784e3b800ed405d1cde75 - Patch
References () https://git.kernel.org/stable/c/8baa234181f632cabacf73e4834a910859e9fcc9 - () https://git.kernel.org/stable/c/8baa234181f632cabacf73e4834a910859e9fcc9 - Patch
References () https://git.kernel.org/stable/c/8d849adfbc3e98417fb541620568db1a759ef441 - () https://git.kernel.org/stable/c/8d849adfbc3e98417fb541620568db1a759ef441 - Patch
References () https://git.kernel.org/stable/c/d47234840aeb4182ed3ee795c578b1dfa9cbd25b - () https://git.kernel.org/stable/c/d47234840aeb4182ed3ee795c578b1dfa9cbd25b - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

06 May 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 12:16

Updated : 2026-05-08 18:02

NVD link : CVE-2026-43124

Mitre link : CVE-2026-43124

CVE.ORG link : CVE-2026-43124

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference