Medium 5.5Published May 6, 2026

CVE-2026-43108soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei

Updated under an hour ago (Oct 28, 2026, 6:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei It looks element length declared in servreg_loc_pfr_req_ei for reason not matching servreg_loc_pfr_req's reason field due which we could observe decoding error on PD crash. qmi_decode_string_elem: String len 81 >= Max Len 65 Fix this by matching with servreg_loc_pfr_req's reason field.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1ebcde047c547134e894508468ead0b7bd3b967d before c93ca7c5a72e23a83a0b96f7f5c41a7a72f1dc47; from 1ebcde047c547134e894508468ead0b7bd3b967d before 7d75145672cf2ec7c5417e3243af72c48314f7bb; from 1ebcde047c547134e894508468ead0b7bd3b967d before cba84132c2ac7c08b215ce4962bc6f522c08a88c; from 1ebcde047c547134e894508468ead0b7bd3b967d before 641f6fda143b879da1515f821ee475073678cf2a	CNA record
linux linux_kernel linux:linux_kernel	from 6.11 before 6.12.83; from 6.13 before 6.18.24; from 6.19 before 6.19.14; 7.0; 7.0; 7.0; 7.0; 7.0; and 2 more ranges	NVD

References

References

https://git.kernel.org/stable/c/c93ca7c5a72e23a83a0b96f7f5c41a7a72f1dc47	patch
https://git.kernel.org/stable/c/7d75145672cf2ec7c5417e3243af72c48314f7bb	patch
https://git.kernel.org/stable/c/cba84132c2ac7c08b215ce4962bc6f522c08a88c	patch
https://git.kernel.org/stable/c/641f6fda143b879da1515f821ee475073678cf2a	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.