Medium 5.5Published May 6, 2026

CVE-2026-43124pstore: ram_core: fix incorrect success return when vmap() fails

Updated under an hour ago (Oct 26, 2026, 7:40 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In persistent_ram_vmap(), vmap() may return NULL on failure. If offset is non-zero, adding offset_in_page(start) causes the function to return a non-NULL pointer even though the mapping failed. persistent_ram_buffer_map() therefore incorrectly returns success. Subsequent access to prz->buffer may dereference an invalid address and cause crashes. Add proper NULL checking for vmap() failures.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 831b624df1b420c8f9281ed1307a8db23afb72df before d47234840aeb4182ed3ee795c578b1dfa9cbd25b; from 831b624df1b420c8f9281ed1307a8db23afb72df before 49918dd52615097529811d21ec6074dd02ebe77c; 831b624df1b420c8f9281ed1307a8db23afb72df builds before 8baa234181f632cabacf73e4834a910859e9fcc9; 831b624df1b420c8f9281ed1307a8db23afb72df builds before 1da904e84de608907662ad8a51ba9c571d61e003; 831b624df1b420c8f9281ed1307a8db23afb72df builds before 8d849adfbc3e98417fb541620568db1a759ef441; 831b624df1b420c8f9281ed1307a8db23afb72df builds before 2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb; 831b624df1b420c8f9281ed1307a8db23afb72df builds before 88d5b28f63c7aac1271784e3b800ed405d1cde75; from 831b624df1b420c8f9281ed1307a8db23afb72df before 05363abc7625cf18c96e67f50673cd07f11da5e9; and 12 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 3.16.62 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/d47234840aeb4182ed3ee795c578b1dfa9cbd25b	patch
https://git.kernel.org/stable/c/49918dd52615097529811d21ec6074dd02ebe77c	patch
https://git.kernel.org/stable/c/8baa234181f632cabacf73e4834a910859e9fcc9	patch
https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003	patch
https://git.kernel.org/stable/c/8d849adfbc3e98417fb541620568db1a759ef441	patch
https://git.kernel.org/stable/c/2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb	patch
https://git.kernel.org/stable/c/88d5b28f63c7aac1271784e3b800ed405d1cde75	patch
https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.