PT-2026-43857 · Linux · Linux Kernel

Published 2026-05-27 · Updated 2026-06-04 · CVE-2026-45990

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the slub allocator where the krealloc() and kvrealloc() functions can cause data loss or buffer overflows. This occurs during the reallocation fallback path when forcing a new alignment or NUMA node. Specifically, data loss happens during NUMA migration because the copy operation may occur before the original size is initialized, resulting in zero bytes being copied. Additionally, a buffer overflow occurs when shrinking an object while forcing a new alignment, as the system may use the old size for the copy operation instead of the smaller new size, leading to an out-of-bounds write.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2026-45990

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 285

• https://git.kernel.org/stable/c/550fa6b5aabb096554536ac1e3ec96b76cbb35fd · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-45990 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-45990 · Vendor Advisory
• https://git.kernel.org/stable/c/38387ccc0fbe38d14fb4c2ad7ee1d7404e5e59fd · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-45990 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-45990 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-45990 · Security Note
• https://git.kernel.org/stable/c/082a6d03a2d685a83a332666b500ad3966349588 · Patch
• https://ubuntu.com/security/CVE-2026-45990 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-46166 · Note
• https://suse.com/security/cve/CVE-2026-46042 · Note
• https://suse.com/security/cve/CVE-2026-45840 · Note
• https://suse.com/security/cve/CVE-2026-46224 · Note
• https://suse.com/security/cve/CVE-2026-46053 · Note