PT-2026-38945 · Linux+1 · Linux Kernel+1

Published 2026-05-08 · Updated 2026-05-28 · CVE-2026-43303

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Certain subsystems, including slub, shmem, and ttm, fail to clear the page->private variable before freeing pages. When these pages are subsequently allocated as high-order pages and split through the split page() function, the tail pages retain stale values in page->private. This leads to a use-after-free condition in the swap subsystem, as the swap code assumes freshly allocated pages have a page->private value of 0. Consequently, the swap count continued() function may incorrectly identify a valid continuation list and iterate over uninitialized page->lru values containing LIST POISON, resulting in a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2026:21556

ALSA-2026:21557

CVE-2026-43303

RHSA-2026:21556

RHSA-2026:21557

Affected Products

Linux Kernel

Rocky Linux

References · 73

• https://errata.rockylinux.org/RLSA-2026:21556 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:21556 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43303 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43303 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43303 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43303 · Security Note
• https://errata.almalinux.org/10/ALSA-2026-21557.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:21557 · Vendor Advisory
• https://git.kernel.org/stable/c/23b82b7a26182ad840ae67d390d7ec9771e8c00f · Patch
• https://git.kernel.org/stable/c/ac1ea219590c09572ed5992dc233bbf7bb70fef9 · Patch
• https://ubuntu.com/security/CVE-2026-43303 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43303 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43303 · Vendor Advisory
• https://git.kernel.org/stable/c/d757c793853ec5483eb41ec2942c300b8fa720fb · Patch
• https://errata.almalinux.org/9/ALSA-2026-21556.html · Vendor Advisory