Riskcovery

CVE-2026-43124

pstore: ram_core: fix incorrect success return when vmap() fails

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 23, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pstore: ram_core: fix incorrect success return when vmap() fails

In persistent_ram_vmap(), vmap() may return NULL on failure.

If offset is non-zero, adding offset_in_page(start) causes the function to return a non-NULL pointer even though the mapping failed. persistent_ram_buffer_map() therefore incorrectly returns success.

Subsequent access to prz->buffer may dereference an invalid address and cause crashes.

Add proper NULL checking for vmap() failures.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 831b624df1b420c8f9281ed1307a8db23afb72df to before d47234840aeb4182ed3ee795c578b1dfa9cbd25bAffected
  • 831b624df1b420c8f9281ed1307a8db23afb72df to before 49918dd52615097529811d21ec6074dd02ebe77cAffected
  • 831b624df1b420c8f9281ed1307a8db23afb72df to before 8baa234181f632cabacf73e4834a910859e9fcc9Affected
  • 831b624df1b420c8f9281ed1307a8db23afb72df to before 1da904e84de608907662ad8a51ba9c571d61e003Affected
  • 831b624df1b420c8f9281ed1307a8db23afb72df to before 8d849adfbc3e98417fb541620568db1a759ef441Affected
  • 831b624df1b420c8f9281ed1307a8db23afb72df to before 2c99326dc1c79b7ce3c8dd92929b5ce724ff70ebAffected
  • 831b624df1b420c8f9281ed1307a8db23afb72df to before 88d5b28f63c7aac1271784e3b800ed405d1cde75Affected
  • 831b624df1b420c8f9281ed1307a8db23afb72df to before 05363abc7625cf18c96e67f50673cd07f11da5e9Affected
  • 9095f19baae92afb978f8df77d19280fe291b337Affected
  • 36a9916189b46b78dbf4fa542739b464444f0537Affected
  • 1cd01dba1355e291f636555b1920625ed58c1623Affected
  • 7026e2457c5b0c0e8a81e65a8209b8420a437b4dAffected
  • 1e5b387747ba285a64348b9a96b246d0b9d52b03Affected
  • d0028f48b33086cf6d8f87831a650866107b5785Affected
  • 3.16.62 to before 3.17Affected
  • 3.18.123 to before 3.19Affected
  • 4.4.158 to before 4.5Affected
  • 4.9.129 to before 4.10Affected
  • 4.14.72 to before 4.15Affected
  • 4.18.10 to before 4.19Affected
LinuxLinux
  • 4.19Affected
  • before 4.19Not affected
  • 5.10.252 through 5.10.*Not affected
  • 5.15.202 through 5.15.*Not affected
  • 6.1.165 through 6.1.*Not affected
  • 6.6.128 through 6.6.*Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.