CVE Explorer

CVE-2026-43272

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer head_page in rb_meta_validate_events() which is not initialized at the beginning of a function. This pointer can be dereferenced if there is a failure during reader page validation. In this case the control is passed to "invalid" label where the pointer is dereferenced in a loop. To fix the issue initialize orig_head and head_page before calling

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:19bd77c48588666adbf83ac49df0961c2753ba608f5e4c2292dcfc10ead821cc

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/trace/ring_buffer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"bc77986f3cb7476637052edf2d87137fa39f153d","status":"affected","version":"5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55","versionType":"git"},{"lessThan":"d9942396845fef2369478c157b26738fe07142f6","status":"affected","version":"5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55","versionType":"git"},{"lessThan":"f1547779402c4cd67755c33616b7203baa88420b","status":"affected","version":"5f3b6e839f3ceb8d6ef…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6887e17b0add50e2c16e9dc41b9c65e41bda3cb6809c303419ed2ffb9d27ff69 · sha256:1e7f11aac946689a… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/trace/ring_buffer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.12"},{"lessThan":"6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.16","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.6","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6887e17b0add50e2c16e9dc41b9c65e41bda3cb6809c303419ed2ffb9d27ff69 · sha256:1e7f11aac946689a… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6887e17b0add50e2c16e9dc41b9c65e41bda3cb6809c303419ed2ffb9d27ff69 · sha256:1e7f11aac946689a… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6887e17b0add50e2c16e9dc41b9c65e41bda3cb6809c303419ed2ffb9d27ff69 · sha256:1e7f11aac946689a… · /containers/cna/affected/1

Source references

3 source assertions

{"url":"https://git.kernel.org/stable/c/bc77986f3cb7476637052edf2d87137fa39f153d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6887e17b0add50e2c16e9dc41b9c65e41bda3cb6809c303419ed2ffb9d27ff69 · sha256:1e7f11aac946689a… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/d9942396845fef2369478c157b26738fe07142f6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6887e17b0add50e2c16e9dc41b9c65e41bda3cb6809c303419ed2ffb9d27ff69 · sha256:1e7f11aac946689a… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/f1547779402c4cd67755c33616b7203baa88420b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6887e17b0add50e2c16e9dc41b9c65e41bda3cb6809c303419ed2ffb9d27ff69 · sha256:1e7f11aac946689a… · /containers/cna/references/2

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer