CVE-2026-43124 Details
Description
In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In persistent_ram_vmap(), vmap() may return NULL on failure. If offset is non-zero, adding offset_in_page(start) causes the function to return a non-NULL pointer even though the mapping failed. persistent_ram_buffer_map() therefore incorrectly returns success. Subsequent access to prz->buffer may dereference an invalid address and cause crashes. Add proper NULL checking for vmap() failures.
A vulnerability in the Linux kernel's pstore ram_core component can lead to memory access errors. The issue arises in the persistent_ram_vmap() function, where the vmap() call may fail and return NULL. If the offset is non-zero, adding offset_in_page(start) can misleadingly make it appear as though the mapping was successful. This false success leads the persistent_ram_buffer_map() function to return a success status, while subsequent accesses to the buffer can dereference invalid memory addresses, causing crashes. The vulnerability has been addressed by adding proper NULL checks for vmap() failures.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb | kernel.org | Patch |
| https://git.kernel.org/stable/c/49918dd52615097529811d21ec6074dd02ebe77c | kernel.org | Patch |
| https://git.kernel.org/stable/c/88d5b28f63c7aac1271784e3b800ed405d1cde75 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8baa234181f632cabacf73e4834a910859e9fcc9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8d849adfbc3e98417fb541620568db1a759ef441 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d47234840aeb4182ed3ee795c578b1dfa9cbd25b | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.16.62, < 5.10.252 >= 5.11, < 5.15.202 >= 5.16, < 6.1.165 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 8, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | New CVE Received | kernel.org |