CVE-2026-43045
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
01/05/2026
Última modificación:
08/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
mshv: Fix error handling in mshv_region_pin<br />
<br />
The current error handling has two issues:<br />
<br />
First, pin_user_pages_fast() can return a short pin count (less than<br />
requested but greater than zero) when it cannot pin all requested pages.<br />
This is treated as success, leading to partially pinned regions being<br />
used, which causes memory corruption.<br />
<br />
Second, when an error occurs mid-loop, already pinned pages from the<br />
current batch are not properly accounted for before calling<br />
mshv_region_invalidate_pages(), causing a page reference leak.<br />
<br />
Treat short pins as errors and fix partial batch accounting before<br />
cleanup.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.15 (incluyendo) | 6.19.12 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página