{"id":"CVE-2026-43124","title":"pstore: ram_core: fix incorrect success return when vmap() fails","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\npstore: ram_core: fix incorrect success return when vmap() fails\n\nIn persistent_ram_vmap(), vmap() may return NULL on failure.\n\nIf offset is non-zero, adding offset_in_…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < d47234840aeb4182ed3ee795c578b1dfa9cbd25b","Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 49918dd52615097529811d21ec6074dd02ebe77c","Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 8baa234181f632cabacf73e4834a910859e9fcc9","Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 1da904e84de608907662ad8a51ba9c571d61e003","Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 8d849adfbc3e98417fb541620568db1a759ef441","Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb","Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 88d5b28f63c7aac1271784e3b800ed405d1cde75","Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 05363abc7625cf18c96e67f50673cd07f11da5e9","Linux 9095f19baae92afb978f8df77d19280fe291b337","Linux 36a9916189b46b78dbf4fa542739b464444f0537","Linux 1cd01dba1355e291f636555b1920625ed58c1623","Linux 7026e2457c5b0c0e8a81e65a8209b8420a437b4d","Linux 1e5b387747ba285a64348b9a96b246d0b9d52b03","Linux d0028f48b33086cf6d8f87831a650866107b5785","Linux >= 3.16.62 < 3.17","Linux >= 3.18.123 < 3.19","Linux >= 4.4.158 < 4.5","Linux >= 4.9.129 < 4.10","Linux >= 4.14.72 < 4.15","Linux >= 4.18.10 < 4.19","Linux 4.19"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T15:28:51.783666Z"},"published":"2026-05-06","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:32:32.117Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43124","references":[{"url":"https://git.kernel.org/stable/c/d47234840aeb4182ed3ee795c578b1dfa9cbd25b"},{"url":"https://git.kernel.org/stable/c/49918dd52615097529811d21ec6074dd02ebe77c"},{"url":"https://git.kernel.org/stable/c/8baa234181f632cabacf73e4834a910859e9fcc9"},{"url":"https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003"},{"url":"https://git.kernel.org/stable/c/8d849adfbc3e98417fb541620568db1a759ef441"},{"url":"https://git.kernel.org/stable/c/2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb"},{"url":"https://git.kernel.org/stable/c/88d5b28f63c7aac1271784e3b800ed405d1cde75"},{"url":"https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9"}],"tags":["cve.org"],"epss":0.00128,"epssPercentile":0.02471,"ingestedAt":"2026-11-06T15:54:04.019Z","slug":"CVE-2026-43124","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npstore: ram_core: fix incorrect success return when vmap() fails\n\nIn persistent_ram_vmap(), vmap() may return NULL on failure.\n\nIf offset is non-zero, adding offset_in_page(start) causes the function\nto return a non-NULL pointer even though the mapping failed.\npersistent_ram_buffer_map() therefore incorrectly returns success.\n\nSubsequent access to prz->buffer may dereference an invalid address\nand cause crashes.\n\nAdd proper NULL checking for vmap() failures.\n\n## Affected\n\n- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < d47234840aeb4182ed3ee795c578b1dfa9cbd25b`\n- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 49918dd52615097529811d21ec6074dd02ebe77c`\n- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 8baa234181f632cabacf73e4834a910859e9fcc9`\n- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 1da904e84de608907662ad8a51ba9c571d61e003`\n- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 8d849adfbc3e98417fb541620568db1a759ef441`\n- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb`\n- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 88d5b28f63c7aac1271784e3b800ed405d1cde75`\n- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 05363abc7625cf18c96e67f50673cd07f11da5e9`\n- `Linux 9095f19baae92afb978f8df77d19280fe291b337`\n- `Linux 36a9916189b46b78dbf4fa542739b464444f0537`\n- `Linux 1cd01dba1355e291f636555b1920625ed58c1623`\n- `Linux 7026e2457c5b0c0e8a81e65a8209b8420a437b4d`\n- `Linux 1e5b387747ba285a64348b9a96b246d0b9d52b03`\n- `Linux d0028f48b33086cf6d8f87831a650866107b5785`\n- `Linux >= 3.16.62 < 3.17`\n- `Linux >= 3.18.123 < 3.19`\n- `Linux >= 4.4.158 < 4.5`\n- `Linux >= 4.9.129 < 4.10`\n- `Linux >= 4.14.72 < 4.15`\n- `Linux >= 4.18.10 < 4.19`\n- `Linux 4.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}