High 7.8Published May 6, 2026

CVE-2026-43212LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE

Updated under an hour ago (Oct 28, 2026, 9:50 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE The arch definition of cpumask_of_node() cannot handle NUMA_NO_NODE - which is a valid index - so add a check for this.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d4b6f1562a3c3284adcef81d6e4f183d7d34b8a9 before b5bf05e05cdf489a04137e4da407de9d4cca5295; from d4b6f1562a3c3284adcef81d6e4f183d7d34b8a9 before bb1a54f7f011f19ed936632698eae574e0b91063; from d4b6f1562a3c3284adcef81d6e4f183d7d34b8a9 before 92adfb707beec0fe956424373654a70aad35ea13; from d4b6f1562a3c3284adcef81d6e4f183d7d34b8a9 before 61a56df2fbaad3a4d00f0c6a904b5d1ee8982eb4; from d4b6f1562a3c3284adcef81d6e4f183d7d34b8a9 before 1d8f2f024801019d85159a020b72a4424b46bcf4; from d4b6f1562a3c3284adcef81d6e4f183d7d34b8a9 before 94b0c831eda778ae9e4f2164a8b3de485d8977bb	CNA record
linux linux_kernel linux:linux_kernel	from 5.19 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/b5bf05e05cdf489a04137e4da407de9d4cca5295	patch
https://git.kernel.org/stable/c/bb1a54f7f011f19ed936632698eae574e0b91063	patch
https://git.kernel.org/stable/c/92adfb707beec0fe956424373654a70aad35ea13	patch
https://git.kernel.org/stable/c/61a56df2fbaad3a4d00f0c6a904b5d1ee8982eb4	patch
https://git.kernel.org/stable/c/1d8f2f024801019d85159a020b72a4424b46bcf4	patch
https://git.kernel.org/stable/c/94b0c831eda778ae9e4f2164a8b3de485d8977bb	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.