PT-2026-37464 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-15 · CVE-2026-43124

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the pstore ram core component where the persistent ram vmap() function may return a non-NULL pointer even when vmap() fails, provided the offset is non-zero. This occurs because adding offset in page(start) to a NULL return value results in a non-NULL address. Consequently, the persistent ram buffer map() function incorrectly reports success, which can lead to the dereferencing of an invalid address via prz->buffer and cause system crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-43124

OESA-2026-2311

Affected Products

Linux Kernel

References · 49

• https://nvd.nist.gov/vuln/detail/CVE-2026-43064 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31697 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31441 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43020 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43049 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31674 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31404 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31515 · Security Note
• https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31521 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31673 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-43124 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43284 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31682 · Security Note