CVE-2026-43272

Source
https://cve.org/CVERecord?id=CVE-2026-43272
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43272.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-43272
Downstream
BELL (1)
CGA (5)
DEBIAN (1)
openSUSE (1)
ROOT (1)
SUSE (4)
UBUNTU (1)
Related
Published
2026-05-06T11:28:56Z
Modified
2026-10-28T02:30:35Z
Summary
ring-buffer: Fix possible dereference of uninitialized pointer
Details

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Fix possible dereference of uninitialized pointer

There is a pointer head_page in rb_meta_validate_events() which is not initialized at the beginning of a function. This pointer can be dereferenced if there is a failure during reader page validation. In this case the control is passed to "invalid" label where the pointer is dereferenced in a loop.

To fix the issue initialize orig_head and head_page before calling rb_validate_buffer.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43272.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55
Fixed
a4afdff9c715af50cf6c3f2dc601932c2cea17a2
Fixed
bc77986f3cb7476637052edf2d87137fa39f153d
Fixed
d9942396845fef2369478c157b26738fe07142f6
Fixed
f1547779402c4cd67755c33616b7203baa88420b

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43272.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.16
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43272.json"