CVE-2026-43272

ring-buffer: Fix possible dereference of uninitialized pointer

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
Oct 21, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Fix possible dereference of uninitialized pointer

There is a pointer head_page in rb_meta_validate_events() which is not initialized at the beginning of a function. This pointer can be dereferenced if there is a failure during reader page validation. In this case the control is passed to "invalid" label where the pointer is dereferenced in a loop.

To fix the issue initialize orig_head and head_page before calling rb_validate_buffer.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to before a4afdff9c715af50cf6c3f2dc601932c2cea17a2Affected
  • 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to before bc77986f3cb7476637052edf2d87137fa39f153dAffected
  • 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to before d9942396845fef2369478c157b26738fe07142f6Affected
  • 5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 to before f1547779402c4cd67755c33616b7203baa88420bAffected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.