CVE-2026-43272: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer head_page in rb_meta_validate_events() which is not initialized at the beginning of a function. This pointer can be dereferenced if there is a failure during reader page validation. In this case the control is passed to "invalid" label where the pointer is dereferenced in a loop. To fix the issue initialize orig_head and head_page before calling rb_validate_buffer. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Засегнати продукти

• Linux Linux: 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 преди a4afdff9c715af50cf6c3f2dc601932c2cea17a2; 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 преди bc77986f3cb7476637052edf2d87137fa39f153d; 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 преди d9942396845fef2369478c157b26738fe07142f6; 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 преди f1547779402c4cd67755c33616b7203baa88420b
• Linux Linux: 6.12; преди 6.12; 6.12.114 до 6.12.*; 6.18.16 до 6.18.*; 6.19.6 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-43272
• https://nvd.nist.gov/vuln/detail/CVE-2026-43272
• https://git.kernel.org/stable/c/a4afdff9c715af50cf6c3f2dc601932c2cea17a2
• https://git.kernel.org/stable/c/bc77986f3cb7476637052edf2d87137fa39f153d
• https://git.kernel.org/stable/c/d9942396845fef2369478c157b26738fe07142f6
• https://git.kernel.org/stable/c/f1547779402c4cd67755c33616b7203baa88420b