PT-2026-37598 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-09 · CVE-2026-43258

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Alpha systems may experience sporadic user-space crashes and heap corruption when memory compaction is enabled. This issue is caused by insufficient TLB (Translation Lookaside Buffer) shootdown during page migration, where the TLB is a hardware cache used by the memory management unit to store recent translations of virtual memory to physical addresses. The failure to properly invalidate these translations allows stale data or instruction translations to persist after migration, leading to SIGSEGV, glibc allocator failures, and compiler internal errors. The issue affects both UP (Uniprocessor) and SMP (Symmetric Multiprocessing) Alpha systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-43258

Affected Products

Linux Kernel

References · 14

• https://osv.dev/vulnerability/BELL-CVE-2026-43258 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43258 · Vendor Advisory
• https://git.kernel.org/stable/c/dd5712f3379cfe760267cdd28ff957d9ab4e51c7 · Patch
• https://ubuntu.com/security/CVE-2026-43258 · Vendor Advisory
• https://git.kernel.org/stable/c/03e42b5f7ad4c2c3db8bd384bab7990d5d53c90f · Patch
• https://git.kernel.org/stable/c/bab8d762a8dbb816b10011e13b87d1bca91e5f77 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43258 · Vendor Advisory
• https://git.kernel.org/stable/c/d4ca6ca2c6f5a1d19d9014c5b36d96637846b5d6 · Patch
• https://cve.org/CVERecord?id=CVE-2026-43258 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43258 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-43258 · Vendor Advisory
• https://twitter.com/vuldb/status/2052036453958664552 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2026-43258 · Note
• https://git.kernel.org/linus/dd5712f3379cfe760267cdd28ff957d9ab4e51c7 · Note