PT-2026-39050 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-15 · CVE-2026-43389

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the memfd luo component where the preservation of folios (units of physical memory management) does not correctly handle dirty states. A dirty folio is one that has been written to, while a clean folio has no user data and can be freed under memory pressure. Previously, the dirty flag was saved during preserve(), but if a folio became dirty later, the serialized state would incorrectly mark it as clean. Consequently, after a retrieve() operation, the kernel might reclaim the folio under memory pressure, leading to the loss of user data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-43389

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43389.json · Exploit
• https://cve.org/CVERecord?id=CVE-2026-43389 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43389 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43389 · Vendor Advisory
• https://git.kernel.org/stable/c/e901c871d4b592f0042e30f3a0f031eae79744ec · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43389 · Security Note
• https://ubuntu.com/security/CVE-2026-43389 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43389 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-43389 · Vendor Advisory
• https://git.kernel.org/stable/c/7e04bf1f33151a30e06a65b74b5f2c19fc2be128 · Patch
• https://git.kernel.org/linus/7e04bf1f33151a30e06a65b74b5f2c19fc2be128 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/infoflowcloud/status/2052769651495449019 · Twitter Post
• https://twitter.com/CVEnew/status/2052767694940950888 · Twitter Post
• https://twitter.com/hetmehtaa/status/2055151398283837677 · Twitter Post