PT-2026-37076 · Linux · Linux Kernel

Published 2026-05-05 · Updated 2026-06-07 · CVE-2026-43073

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A misleadingly named function copy user nocache() was identified as a specialty memory copy routine that uses non-temporal stores for the destination and provides exception handling for both source and destination accesses. Non-temporal stores are memory write operations that bypass the cache to improve performance when writing large amounts of data. The function was misused by some drivers to perform kernel copies without requiring exception handling, simply to utilize the non-temporal destination. The function has been renamed and its prototype updated to ensure it does not take a user pointer unless proper conversion is performed and to use a full size t for the argument size to prevent silent truncation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43073

OPENSUSE-SU-2026:10793-1

Affected Products

Linux Kernel

References · 57

• https://git.kernel.org/stable/c/d187a86de793f84766ea40b9ade7ac60aabbb4fe · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-43073 · Vendor Advisory
• https://git.kernel.org/stable/c/c6d4e0599e7e73abc04e2488dfeb7940c4039660 · Patch
• https://ubuntu.com/security/CVE-2026-43073 · Vendor Advisory
• https://git.kernel.org/stable/c/efea91ad1729ff1853d7418e4d3bc27d085e72d0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43073 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-43073 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10793-1 · Vendor Advisory
• https://git.kernel.org/stable/c/d993e1723aa2a085aa0d72e70ea889031fc225b4 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43073 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43073 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-43073 · Vendor Advisory
• https://git.kernel.org/stable/c/14b9194db4a28421a4dbe5d6e519efbaa7c5f3cd · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43073 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-31706 · Note