PT-2026-39110 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-26 · CVE-2026-43449

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-out-of-bounds issue exists in the nvme-pci component. The problem occurs in the nvme dbbuf set() function due to an incorrect loop condition. The dev->online queues variable tracks the count of queues, where valid indices range from 0 to dev->online queues minus 1. Because the loop condition failed to properly restrict the index, it could access memory outside the allocated slab boundary. Index 0 is specifically excluded as it represents the admin queue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-43449

Affected Products

Linux Kernel

References · 20

• https://ubuntu.com/security/CVE-2026-43449 · Vendor Advisory
• https://git.kernel.org/stable/c/328c551f0cc81ee776b186b86cc6e5253bb6fda7 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43449 · Vendor Advisory
• https://git.kernel.org/stable/c/2b9d605c3f0d3262142f196249cd3bd58c857c71 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43449 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43449 · Vendor Advisory
• https://git.kernel.org/stable/c/86183d550559e45e07059bbdf17331fea469e38c · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-43449 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43449 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43449 · Security Note
• https://git.kernel.org/stable/c/50bad78f03a02d3c0f228edf9912b494d3e7acb9 · Patch
• https://git.kernel.org/stable/c/83e6edd6358326c9c2de31a54bb4a1ec50703f1f · Patch
• https://git.kernel.org/stable/c/b4e78f1427c7d6859229ae9616df54e1fc05a516 · Patch
• https://git.kernel.org/stable/c/d7990c936e25f484b61a5adeeadc1d290a9fd16e · Patch
• https://git.kernel.org/stable/c/78279d2d74c58a0ed64e43cf601a02649771182e · Patch