Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43492

In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() Yiming reports an integer underflow in mpi_read_raw_from_sgl() when subtracting "lzeros" from the unsigned "nbytes". For this to happen, the scatterlist "sgl" needs to occupy more bytes than the "nbytes" parameter and the first "nbytes + 1" bytes of the scatterlist must be zero. Under these conditions, the while loop iterating over the scatterlist will count m
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:80a75175fbf0671a9d383f796608e2af655ed6cec6c950d8c3ce82b8048f3bf3
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["lib/crypto/mpi/mpicoder.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a1793a48881ec8d26e9c79b0ee65753f1c6846a4","status":"affected","version":"2d4d1eea540b27c72488fd1914674c42473d53df","versionType":"git"},{"lessThan":"1abd50fc3cfa16fc2074a3c8c2729c50fd9d7043","status":"affected","version":"2d4d1eea540b27c72488fd1914674c42473d53df","versionType":"git"},{"lessThan":"6d63615c796c085b4984e3031b9fa77fffb47360","status":"affected","version":"2d4d1eea540b27c72488…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["lib/crypto/mpi/mpicoder.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.4"},{"lessThan":"4.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["lib/crypto/mpi/mpicoder.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a1793a48881ec8d26e9c79b0ee65753f1c6846a4","status":"affected","version":"2d4d1eea540b27c72488fd1914674c42473d53df","versionType":"git"},{"lessThan":"1abd50fc3cfa16fc2074a3c8c2729c50fd9d7043","status":"affected","version":"2d4d1eea540b27c72488fd1914674c42473d53df","versionType":"git"},{"lessThan":"6d63615c796c085b4984e3031b9fa77fffb47360","status":"affected","version":"2d4d1eea540b27c72488…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["lib/crypto/mpi/mpicoder.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.4"},{"lessThan":"4.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1abd50fc3cfa16fc2074a3c8c2729c50fd9d7043"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/26d3a97ad46c7a9226ec04d4bf35bd4998a97d16"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/2aa77a18dc7f2670497fe3ee5acbeda0b57659e5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/30e513e755bb381afce6fb57cdc8694136193f22"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/6d63615c796c085b4984e3031b9fa77fffb47360"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/8637dfb4c1d8a7026ef681f2477c6de8b71c4003"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/8c2f1288250a90a4b5cabed5d888d7e3aeed4035"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/a1793a48881ec8d26e9c79b0ee65753f1c6846a4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:bec74e92017b83845c7bf09b5ea07253c04eb4d2ac6b96cecbf4c351de2b6850 · sha256:3fafb52416c8a7d6… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer