Riskcovery

CVE-2026-43210

tracing: ring-buffer: Fix to check event length before using

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tracing: ring-buffer: Fix to check event length before using

Check the event length before adding it for accessing next index in rb_read_data_buffer(). Since this function is used for validating possibly broken ring buffers, the length of the event could be broken. In that case, the new event (e + len) can point a wrong address. To avoid invalid memory access at boot, check whether the length of each event is in the possible range before using it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to before b4700c089a10f89de3a5149d57f8a58306458982Affected
  • 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to before 5026010110a5ad2268d8c23e1e286ab7c736f7acAffected
  • 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to before 9eb80e54494ef1efef8a64bec4ffa672c9cf411eAffected
  • 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to before 912b0ee248c529a4f45d1e7f568dc1adddbf2a4aAffected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.