In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In persistent_ram_vmap(), vmap() may return NULL on failure. If offset is non-zero, adding offset_in_page(start) causes the function to return a non-NULL pointer even though the mapping failed. persistent_ram_buffer_map() therefore incorrectly returns success. Subsequent access to prz->buffer may dereference an invalid address and cause crashes. Add proper NULL checking for vmap() failures.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/05363abc7625cf18c96e67f50673cd07f11da5e9 cve-icon cve-icon
https://git.kernel.org/stable/c/1da904e84de608907662ad8a51ba9c571d61e003 cve-icon cve-icon
https://git.kernel.org/stable/c/2c99326dc1c79b7ce3c8dd92929b5ce724ff70eb cve-icon cve-icon
https://git.kernel.org/stable/c/49918dd52615097529811d21ec6074dd02ebe77c cve-icon cve-icon
https://git.kernel.org/stable/c/88d5b28f63c7aac1271784e3b800ed405d1cde75 cve-icon cve-icon
https://git.kernel.org/stable/c/8baa234181f632cabacf73e4834a910859e9fcc9 cve-icon cve-icon
https://git.kernel.org/stable/c/8d849adfbc3e98417fb541620568db1a759ef441 cve-icon cve-icon
https://git.kernel.org/stable/c/d47234840aeb4182ed3ee795c578b1dfa9cbd25b cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026050619-CVE-2026-43124-8141@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-43124 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-43124 cve-icon
History

Thu, 07 May 2026 06:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-390

Thu, 07 May 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-253
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Wed, 06 May 2026 16:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-390

Wed, 06 May 2026 12:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return when vmap() fails In persistent_ram_vmap(), vmap() may return NULL on failure. If offset is non-zero, adding offset_in_page(start) causes the function to return a non-NULL pointer even though the mapping failed. persistent_ram_buffer_map() therefore incorrectly returns success. Subsequent access to prz->buffer may dereference an invalid address and cause crashes. Add proper NULL checking for vmap() failures.
Title pstore: ram_core: fix incorrect success return when vmap() fails
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-05-06T11:27:10.221Z

Updated: 2026-05-07T17:14:16.842Z

Reserved: 2026-05-01T14:12:55.987Z

Link: CVE-2026-43124

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-05-06T12:16:29.313

Modified: 2026-05-06T13:07:51.607

Link: CVE-2026-43124

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-05-06T00:00:00Z

Links: CVE-2026-43124 - Bugzilla