CVE-2026-43248

vhost: move vdpa group bound check to vhost_vdpa

State: Published
Severity: 7.8 High
Published: May 6, 2026
Updated: Oct 30, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

vhost: move vdpa group bound check to vhost_vdpa

Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them.

While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	bda324fd037a6b0d44da5699574ce741ca161bc4 to before 69ec8dd6696069c2f18430d0e05f81d604484ee8Affected bda324fd037a6b0d44da5699574ce741ca161bc4 to before 566899af053246406f2faf931044d2b0af8f34d2Affected bda324fd037a6b0d44da5699574ce741ca161bc4 to before ddb57354634b6ba851b79da45f1de42c646f27d0Affected bda324fd037a6b0d44da5699574ce741ca161bc4 to before 7441d35d14d9a3d66d925d90cb73c75394e6d454Affected bda324fd037a6b0d44da5699574ce741ca161bc4 to before 406db68f9cb976a8ddfafd631197264f2307e9c9Affected bda324fd037a6b0d44da5699574ce741ca161bc4 to before cd025c1e876b4e262e71398236a1550486a73edeAffected
LinuxLinux	5.19Affected before 5.19Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

bda324fd037a6b0d44da5699574ce741ca161bc4 to before 69ec8dd6696069c2f18430d0e05f81d604484ee8Affected
bda324fd037a6b0d44da5699574ce741ca161bc4 to before 566899af053246406f2faf931044d2b0af8f34d2Affected
bda324fd037a6b0d44da5699574ce741ca161bc4 to before ddb57354634b6ba851b79da45f1de42c646f27d0Affected
bda324fd037a6b0d44da5699574ce741ca161bc4 to before 7441d35d14d9a3d66d925d90cb73c75394e6d454Affected
bda324fd037a6b0d44da5699574ce741ca161bc4 to before 406db68f9cb976a8ddfafd631197264f2307e9c9Affected
bda324fd037a6b0d44da5699574ce741ca161bc4 to before cd025c1e876b4e262e71398236a1550486a73edeAffected

LinuxLinux

5.19Affected
before 5.19Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.