---
id: CVE-2026-43124
title: 'pstore: ram_core: fix incorrect success return when vmap() fails'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  pstore: ram_core: fix incorrect success return when vmap() fails

  In persistent_ram_vmap(), vmap() may return NULL on failure.

  If offset is non-zero, adding offset_in_…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df <
    d47234840aeb4182ed3ee795c578b1dfa9cbd25b
  - >-
    Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df <
    49918dd52615097529811d21ec6074dd02ebe77c
  - >-
    Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df <
    8baa234181f632cabacf73e4834a910859e9fcc9
  - >-
    Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df <
    1da904e84de608907662ad8a51ba9c571d61e003
  - >-
    Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df <
    8d849adfbc3e98417fb541620568db1a759ef441
  - >-
    Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df <
    2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb
  - >-
    Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df <
    88d5b28f63c7aac1271784e3b800ed405d1cde75
  - >-
    Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df <
    05363abc7625cf18c96e67f50673cd07f11da5e9
  - Linux 9095f19baae92afb978f8df77d19280fe291b337
  - Linux 36a9916189b46b78dbf4fa542739b464444f0537
  - Linux 1cd01dba1355e291f636555b1920625ed58c1623
  - Linux 7026e2457c5b0c0e8a81e65a8209b8420a437b4d
  - Linux 1e5b387747ba285a64348b9a96b246d0b9d52b03
  - Linux d0028f48b33086cf6d8f87831a650866107b5785
  - Linux >= 3.16.62 < 3.17
  - Linux >= 3.18.123 < 3.19
  - Linux >= 4.4.158 < 4.5
  - Linux >= 4.9.129 < 4.10
  - Linux >= 4.14.72 < 4.15
  - Linux >= 4.18.10 < 4.19
  - Linux 4.19
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:28:51.783666Z'
published: '2026-05-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:32:32.117Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43124'
references:
  - url: 'https://git.kernel.org/stable/c/d47234840aeb4182ed3ee795c578b1dfa9cbd25b'
  - url: 'https://git.kernel.org/stable/c/49918dd52615097529811d21ec6074dd02ebe77c'
  - url: 'https://git.kernel.org/stable/c/8baa234181f632cabacf73e4834a910859e9fcc9'
  - url: 'https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003'
  - url: 'https://git.kernel.org/stable/c/8d849adfbc3e98417fb541620568db1a759ef441'
  - url: 'https://git.kernel.org/stable/c/2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb'
  - url: 'https://git.kernel.org/stable/c/88d5b28f63c7aac1271784e3b800ed405d1cde75'
  - url: 'https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9'
tags:
  - cve.org
epss: 0.00128
epssPercentile: 0.02471
ingestedAt: '2026-11-06T15:54:04.019Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

pstore: ram_core: fix incorrect success return when vmap() fails

In persistent_ram_vmap(), vmap() may return NULL on failure.

If offset is non-zero, adding offset_in_page(start) causes the function
to return a non-NULL pointer even though the mapping failed.
persistent_ram_buffer_map() therefore incorrectly returns success.

Subsequent access to prz->buffer may dereference an invalid address
and cause crashes.

Add proper NULL checking for vmap() failures.

## Affected

- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < d47234840aeb4182ed3ee795c578b1dfa9cbd25b`
- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 49918dd52615097529811d21ec6074dd02ebe77c`
- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 8baa234181f632cabacf73e4834a910859e9fcc9`
- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 1da904e84de608907662ad8a51ba9c571d61e003`
- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 8d849adfbc3e98417fb541620568db1a759ef441`
- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb`
- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 88d5b28f63c7aac1271784e3b800ed405d1cde75`
- `Linux >= 831b624df1b420c8f9281ed1307a8db23afb72df < 05363abc7625cf18c96e67f50673cd07f11da5e9`
- `Linux 9095f19baae92afb978f8df77d19280fe291b337`
- `Linux 36a9916189b46b78dbf4fa542739b464444f0537`
- `Linux 1cd01dba1355e291f636555b1920625ed58c1623`
- `Linux 7026e2457c5b0c0e8a81e65a8209b8420a437b4d`
- `Linux 1e5b387747ba285a64348b9a96b246d0b9d52b03`
- `Linux d0028f48b33086cf6d8f87831a650866107b5785`
- `Linux >= 3.16.62 < 3.17`
- `Linux >= 3.18.123 < 3.19`
- `Linux >= 4.4.158 < 4.5`
- `Linux >= 4.9.129 < 4.10`
- `Linux >= 4.14.72 < 4.15`
- `Linux >= 4.18.10 < 4.19`
- `Linux 4.19`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.