PT-2026-38944 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-21 · CVE-2026-43302

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/v3d component where the max seg size is not set when using V3D rendering with CONFIG DMA API DEBUG enabled. This causes the kernel to default to a 64K segment size, leading to segment size mismatch reports and debug warnings from the debug dma map sg() function due to the over-mapping of the V3D segment length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-131

Related Identifiers

CVE-2026-43302

Affected Products

Linux Kernel

References · 19

• https://cve.org/CVERecord?id=CVE-2026-43302 · Security Note
• https://git.kernel.org/stable/c/9eb018828b1b30dfba689c060735c50fc5b9f704 · Patch
• https://git.kernel.org/stable/c/225023e3619b81af6d8d0e680503fc2d68633023 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43302 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43302 · Vendor Advisory
• https://git.kernel.org/stable/c/cf510785f74e74c54de40a43a955b7f844857487 · Patch
• https://git.kernel.org/stable/c/0290934d30abe7c88e18140fd5184c3f386b1e44 · Patch
• https://git.kernel.org/stable/c/db15f469a88d3bbeeaa9f8c9f5e74d856ba5d7d2 · Patch
• https://git.kernel.org/stable/c/2663ef70c6123b2232190f917275e5c3175f97d0 · Patch
• https://ubuntu.com/security/CVE-2026-43302 · Vendor Advisory
• https://git.kernel.org/stable/c/14d0d6c8b4504a60cfeea74775ab2e0164019e65 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43302 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43302 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43302 · Vendor Advisory
• https://git.kernel.org/linus/9eb018828b1b30dfba689c060735c50fc5b9f704 · Note