---
id: CVE-2026-43171
title: 'EFI/CPER: don''t dump the entire memory region'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  EFI/CPER: don't dump the entire memory region

  The current logic at cper_print_fw_err() doesn't check if the
  error record length is big enough to handle offset. On a ba…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <
    02de64ab54b4bb0f1b21bb324aeff3b08612be33
  - >-
    Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <
    0e09b522f2622841389c3b2f9ac4969e35c0809d
  - >-
    Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <
    64ae5aaa7ac93c83da456039e8ec747bfa8a7cff
  - >-
    Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <
    5a9b1dda8481b82851a655c3bcc5b44879b95334
  - >-
    Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <
    7780c0bad2a3a70a8c0113a33c02f4151d901eb3
  - >-
    Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <
    a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91
  - >-
    Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <
    54e131db4cdffd946db890ff33ff2647053fd4f6
  - >-
    Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <
    55cc6fe5716f678f06bcb95140882dfa684464ec
  - Linux 5.7
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:30:26.784250Z'
published: '2026-05-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:32:35.552Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43171'
references:
  - url: 'https://git.kernel.org/stable/c/02de64ab54b4bb0f1b21bb324aeff3b08612be33'
  - url: 'https://git.kernel.org/stable/c/0e09b522f2622841389c3b2f9ac4969e35c0809d'
  - url: 'https://git.kernel.org/stable/c/64ae5aaa7ac93c83da456039e8ec747bfa8a7cff'
  - url: 'https://git.kernel.org/stable/c/5a9b1dda8481b82851a655c3bcc5b44879b95334'
  - url: 'https://git.kernel.org/stable/c/7780c0bad2a3a70a8c0113a33c02f4151d901eb3'
  - url: 'https://git.kernel.org/stable/c/a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91'
  - url: 'https://git.kernel.org/stable/c/54e131db4cdffd946db890ff33ff2647053fd4f6'
  - url: 'https://git.kernel.org/stable/c/55cc6fe5716f678f06bcb95140882dfa684464ec'
tags:
  - cve.org
epss: 0.00123
epssPercentile: 0.02036
ingestedAt: '2026-11-06T15:54:04.011Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

EFI/CPER: don't dump the entire memory region

The current logic at cper_print_fw_err() doesn't check if the
error record length is big enough to handle offset. On a bad firmware,
if the ofset is above the actual record, length -= offset will
underflow, making it dump the entire memory.

The end result can be:

 - the logic taking a lot of time dumping large regions of memory;
 - data disclosure due to the memory dumps;
 - an OOPS, if it tries to dump an unmapped memory region.

Fix it by checking if the section length is too small before doing
a hex dump.

[ rjw: Subject tweaks ]

## Affected

- `Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 < 02de64ab54b4bb0f1b21bb324aeff3b08612be33`
- `Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 < 0e09b522f2622841389c3b2f9ac4969e35c0809d`
- `Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 < 64ae5aaa7ac93c83da456039e8ec747bfa8a7cff`
- `Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 < 5a9b1dda8481b82851a655c3bcc5b44879b95334`
- `Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 < 7780c0bad2a3a70a8c0113a33c02f4151d901eb3`
- `Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 < a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91`
- `Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 < 54e131db4cdffd946db890ff33ff2647053fd4f6`
- `Linux >= 3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 < 55cc6fe5716f678f06bcb95140882dfa684464ec`
- `Linux 5.7`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.