CVE-2026-43108 Details
Description
In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei It looks element length declared in servreg_loc_pfr_req_ei for reason not matching servreg_loc_pfr_req's reason field due which we could observe decoding error on PD crash. qmi_decode_string_elem: String len 81 >= Max Len 65 Fix this by matching with servreg_loc_pfr_req's reason field.
A vulnerability in the Linux kernel's QCOM PD-mapper implementation has been addressed. The issue arose because the declared element length in the 'servreg_loc_pfr_req_ei' structure did not align with the corresponding 'reason' field in the 'servreg_loc_pfr_req' structure. This mismatch led to a decoding error, causing a crash in the PD. The problem was identified in the QMI string decoding, where a string length of 81 exceeded the maximum allowed length of 65. The vulnerability affects several versions of the Linux kernel.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/641f6fda143b879da1515f821ee475073678cf2a | kernel.org | Patch |
| https://git.kernel.org/stable/c/7d75145672cf2ec7c5417e3243af72c48314f7bb | kernel.org | Patch |
| https://git.kernel.org/stable/c/c93ca7c5a72e23a83a0b96f7f5c41a7a72f1dc47 | kernel.org | Patch |
| https://git.kernel.org/stable/c/cba84132c2ac7c08b215ce4962bc6f522c08a88c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.11, < 6.12.83 >= 6.13, < 6.18.24 >= 6.19, < 6.19.14 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 7.0 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 11, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | New CVE Received | kernel.org |