Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43351

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Eagerly init vgic dist/redist on vgic creation If vgic_allocate_private_irqs_locked() fails for any odd reason, we exit kvm_vgic_create() early, leaving dist->rd_regions uninitialised. kvm_vgic_dist_destroy() then comes along and walks into the weeds trying to free the RDs. Got to love this stuff. Solve it by moving all the static initialisation early, and make sure that if we fail halfway, we're in a reasonable
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f8c26b8084ec8a786665dff66fbf0a23d3d0a7771853e888979c5eff8f655bee
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["arch/arm64/kvm/vgic/vgic-init.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.14"},{"lessThan":"6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.19","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2f010a03c83b2b0a30433f1bae6ab5ba8a6e4d174ad5c2080a6a2202e4c626e9 · sha256:079d35b907ba6cff… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/arm64/kvm/vgic/vgic-init.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b7493f48c3dba75674a4ee505b4afa8fe5102457","status":"affected","version":"b3aa9283c0c505b5cfd25f7d6cfd720de2adc807","versionType":"git"},{"lessThan":"a24f1d80fbcdbf8b2a7044a00fa12b3972b4c31c","status":"affected","version":"b3aa9283c0c505b5cfd25f7d6cfd720de2adc807","versionType":"git"},{"lessThan":"ac6769c8f948dff33265c50e524aebf9aa6f1be0","status":"affected","version":"b3aa9283c0c505…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2f010a03c83b2b0a30433f1bae6ab5ba8a6e4d174ad5c2080a6a2202e4c626e9 · sha256:079d35b907ba6cff… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["arch/arm64/kvm/vgic/vgic-init.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.14"},{"lessThan":"6.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.19","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2f010a03c83b2b0a30433f1bae6ab5ba8a6e4d174ad5c2080a6a2202e4c626e9 · sha256:079d35b907ba6cff… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["arch/arm64/kvm/vgic/vgic-init.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b7493f48c3dba75674a4ee505b4afa8fe5102457","status":"affected","version":"b3aa9283c0c505b5cfd25f7d6cfd720de2adc807","versionType":"git"},{"lessThan":"a24f1d80fbcdbf8b2a7044a00fa12b3972b4c31c","status":"affected","version":"b3aa9283c0c505b5cfd25f7d6cfd720de2adc807","versionType":"git"},{"lessThan":"ac6769c8f948dff33265c50e524aebf9aa6f1be0","status":"affected","version":"b3aa9283c0c505…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2f010a03c83b2b0a30433f1bae6ab5ba8a6e4d174ad5c2080a6a2202e4c626e9 · sha256:079d35b907ba6cff… · /containers/cna/affected/0

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/a24f1d80fbcdbf8b2a7044a00fa12b3972b4c31c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f010a03c83b2b0a30433f1bae6ab5ba8a6e4d174ad5c2080a6a2202e4c626e9 · sha256:079d35b907ba6cff… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/ac6769c8f948dff33265c50e524aebf9aa6f1be0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f010a03c83b2b0a30433f1bae6ab5ba8a6e4d174ad5c2080a6a2202e4c626e9 · sha256:079d35b907ba6cff… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b7493f48c3dba75674a4ee505b4afa8fe5102457"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2f010a03c83b2b0a30433f1bae6ab5ba8a6e4d174ad5c2080a6a2202e4c626e9 · sha256:079d35b907ba6cff… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer