PT-2026-38934 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-15 · CVE-2026-43292

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description When CONFIG PAGE OWNER is enabled, freeing KASAN shadow pages during vmalloc cleanup triggers expensive stack unwinding that acquires RCU read locks. Processing a large purge list without rescheduling can cause a task to hold the CPU for extended periods, leading to RCU stalls and potential Out-Of-Memory (OOM) conditions. This occurs in the purge vmap node() and kasan release vmalloc node() functions, where iterating through numerous vmap area entries and freeing associated shadow pages creates an unbounded RCU critical section because each call to kasan release vmalloc() triggers save stack() for page owner tracking.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43292

Affected Products

Linux Kernel

References · 17

• https://git.kernel.org/stable/c/b351fbe71091f7c8676c8ba597653d08b6719447 · Patch
• https://ubuntu.com/security/CVE-2026-43292 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43292 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43292 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43292 · Vendor Advisory
• https://git.kernel.org/stable/c/2efa9c02c9b4c0d6866aa445f11056809b25ca28 · Patch
• https://git.kernel.org/stable/c/1afe45f89d54b7183768ebbbbf14238ec187ab5c · Patch
• https://git.kernel.org/stable/c/5747435e0fd474c24530ef1a6822f47e7d264b27 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43292 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43292 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43292 · Security Note
• https://twitter.com/windowsforum/status/2053771121468530840 · Twitter Post
• https://git.kernel.org/linus/5747435e0fd474c24530ef1a6822f47e7d264b27 · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-43292 · Note
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post