Out-of-bounds read in Linux kernel - CVE-2026-43449
Published: May 8, 2026
Vulnerability identifier: #VU130732
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-43449
CWE-ID: CWE-125
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to an out-of-bounds read in nvme_dbbuf_set when handling queue index calculations. A local user can trigger nvme queue initialization or reset operations to cause a denial of service.
The issue excludes index 0 because it is the admin queue.
How to mitigate CVE-2026-43449
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/2b9d605c3f0d3262142f196249cd3bd58c857c71
- https://git.kernel.org/stable/c/328c551f0cc81ee776b186b86cc6e5253bb6fda7
- https://git.kernel.org/stable/c/50bad78f03a02d3c0f228edf9912b494d3e7acb9
- https://git.kernel.org/stable/c/78279d2d74c58a0ed64e43cf601a02649771182e
- https://git.kernel.org/stable/c/83e6edd6358326c9c2de31a54bb4a1ec50703f1f
- https://git.kernel.org/stable/c/86183d550559e45e07059bbdf17331fea469e38c
- https://git.kernel.org/stable/c/b4e78f1427c7d6859229ae9616df54e1fc05a516
- https://git.kernel.org/stable/c/d7990c936e25f484b61a5adeeadc1d290a9fd16e