CVE Explorer

CVE-2026-43277

In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ensure that won't go past CPER allocated record The logic at ghes_new() prevents allocating too large records, by checking if they're bigger than GHES_ESTATUS_MAX_SIZE (currently, 64KB). Yet, the allocation is done with the actual number of pages from the CPER bios table location, which can be smaller. Yet, a bad firmware could send data with a different size, which might be bigger than the allocated memory, causin

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:afd7532df86265e7e392b4e0aa5a52fed4113569c69fde9ebabf9f78b80c291a

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/acpi/apei/ghes.c","include/acpi/ghes.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"92ba79074c58e65a6e32713758c5a9aecd33c2ea","status":"affected","version":"d334a49113a4a33109fd24e46073280ecd1bea0d","versionType":"git"},{"lessThan":"616c120dcdf1ce96edcd818e38bce49667f80689","status":"affected","version":"d334a49113a4a33109fd24e46073280ecd1bea0d","versionType":"git"},{"lessThan":"f3740a1562445f36f08afab8af59e37117b3acdc","status":"affected","version":…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/acpi/apei/ghes.c","include/acpi/ghes.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.35"},{"lessThan":"2.6.35","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","ver…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/616c120dcdf1ce96edcd818e38bce49667f80689"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/6f5d41984ad896736c23e2fff7c80e15c1319132"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/92ba79074c58e65a6e32713758c5a9aecd33c2ea"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/98bd9b28d4d11e6739ad86524b4be4ada9025e60"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/b6be51a12441136fdf8c49b2525689fbea1856e1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/e0ec99115e135dbb58e11a0df007c7d4771d4a17"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/f3740a1562445f36f08afab8af59e37117b3acdc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/fa2408a24f8f0db14d9cfc613ef162dc267d7ad4"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e5ccc957d0485716d230d3df9ff10d210e1a3f24df850cb0973decb364d0884a · sha256:0323bb43b331680a… · /containers/cna/references/7

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer