PT-2026-38929 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-15 · CVE-2026-43287

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The DRM IOCTL MODE CREATEPROPBLOB ioctl allows userspace to allocate arbitrary-sized property blobs using kernel memory. Because these allocations are not accounted to the allocating process's memory cgroup (memcg), unprivileged users can trigger unbounded kernel memory consumption, potentially leading to a system-wide Out-Of-Memory (OOM) condition, where the system runs out of available memory and begins terminating processes to recover.

Recommendations Mark the property blob data allocation with GFP KERNEL ACCOUNT to ensure memory is properly charged to the caller's memcg.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-43287

Affected Products

Linux Kernel

References · 20

• https://git.kernel.org/stable/c/8e1664b9ee43608eb973d357ae5d858d30cbc9ca · Patch
• https://git.kernel.org/stable/c/cb8b9a1755fe9f38e4fb7f287486d7e7fab3dba4 · Patch
• https://cve.org/CVERecord?id=CVE-2026-43287 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43287 · Vendor Advisory
• https://git.kernel.org/stable/c/b6117210ed349356f8e6027ff020b4d620bca42b · Patch
• https://git.kernel.org/stable/c/bbfaa5761f589a81031b493cb01275a990d6fb25 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43287 · Vendor Advisory
• https://git.kernel.org/stable/c/815fa29cab3c67bebb9d0b5f41145cdd3a14d04d · Patch
• https://git.kernel.org/stable/c/866e0c1a9e7244d58ed74853cb22b81e1900cfdd · Patch
• https://ubuntu.com/security/CVE-2026-43287 · Vendor Advisory
• https://git.kernel.org/stable/c/405fd652d8fedff219a8f48daf8f20e881e303ab · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43287 · Security Note
• https://git.kernel.org/stable/c/26b4309a3ab82a0697751cde52eb336c29c19035 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43287 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43287 · Vendor Advisory