CVE-2026-43150

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43150", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:55.989Z", "datePublished": "2026-05-06T11:27:32.359Z", "dateUpdated": "2026-10-19T19:16:22.180Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:26:12.502Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/arm-cmn: Reject unsupported hardware configurations\n\nSo far we've been fairly lax about accepting both unknown CMN models\n(at least with a warning), and unknown revisions of those which we\ndo know, as although things do frequently change between releases,\ntypically enough remains the same to be somewhat useful for at least\nsome basic bringup checks. However, we also make assumptions of the\nmaximum supported sizes and numbers of things in various places, and\nthere's no guarantee that something new might not be bigger and lead\nto nasty array overflows. Make sure we only try to run on things that\nactually match our assumptions and so will not risk memory corruption.\n\nWe have at least always failed on completely unknown node types, so\nupdate that error message for clarity and consistency too."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable CMN PMU driver is reached locally through platform-device probing and later local perf/debugfs interfaces, not through network or adjacent protocols. A local user can exercise the registered PMU with perf_event_open on an affected system.\nAC:L - Once the kernel is running on an over-large unsupported CMN configuration that the vulnerable driver accepted, triggering the bad paths is straightforward by opening aggregate CMN PMU events or reading the topology map. There is no attacker-contested race or probabilistic condition in the trigger path.\nPR:L - System-wide CMN PMU use is subject to perf_event_open policy and may require CAP_PERFMON/CAP_SYS_ADMIN on default hardened systems, but reasonable deployments allow unprivileged perf access or expose the 0444 debugfs map. Under the required higher-severity choice, a basic local user is sufficient.\nUI:N - No victim user action is needed after the attacker has local access on the affected system. The attacker can invoke perf_event_open or read the exposed debugfs file directly.\nS:U - The corruption occurs inside the host kernel driver and affects the same kernel security authority. There is no VM escape, IOMMU bypass, or cross-authority boundary demonstrated.\nC:H - The bug is explicitly about preventing array overflows and memory corruption in kernel data structures used by the PMU driver. Such kernel memory corruption can reasonably be leveraged for high-impact information disclosure.\nI:H - The unsupported topology can drive out-of-bounds writes in fixed-size PMU bookkeeping arrays or debugfs stack data. Kernel out-of-bounds writes are high-integrity impact because they can corrupt control/data structures and may be exploitable for code execution.\nA:H - The same memory corruption can readily crash or hang the kernel even if not weaponized for privilege escalation. A local trigger can therefore cause high availability impact."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/perf/arm-cmn.c"], "versions": [{"version": "28fa550a49e818d6445e787f584759b1bf21d9d4", "lessThan": "7e2c200010aa93fa78201da959b4ac6b9f8fed0b", "status": "affected", "versionType": "git"}, {"version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "d3e837e11ee9ed08df229272319199003ba00379", "status": "affected", "versionType": "git"}, {"version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "00d69f21ef2ab00e6156c764d89e2b3539eb2f33", "status": "affected", "versionType": "git"}, {"version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "08c7eadd8a934a1968e1aeeee8b61b853b99fb3a", "status": "affected", "versionType": "git"}, {"version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "a251d866f50b6a4c95901fa722025065679c2eca", "status": "affected", "versionType": "git"}, {"version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "36c0de02575ce59dfd879eb4ef63d53a68bbf9ce", "status": "affected", "versionType": "git"}, {"version": "6.1.63", "lessThan": "6.1.165", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/perf/arm-cmn.c"], "versions": [{"version": "6.5", "status": "affected"}, {"version": "0", "lessThan": "6.5", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.165", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.128", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.75", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.16", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.6", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.1.63", "versionEndExcluding": "6.1.165"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.6.128"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.12.75"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.18.16"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.19.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/7e2c200010aa93fa78201da959b4ac6b9f8fed0b"}, {"url": "https://git.kernel.org/stable/c/d3e837e11ee9ed08df229272319199003ba00379"}, {"url": "https://git.kernel.org/stable/c/00d69f21ef2ab00e6156c764d89e2b3539eb2f33"}, {"url": "https://git.kernel.org/stable/c/08c7eadd8a934a1968e1aeeee8b61b853b99fb3a"}, {"url": "https://git.kernel.org/stable/c/a251d866f50b6a4c95901fa722025065679c2eca"}, {"url": "https://git.kernel.org/stable/c/36c0de02575ce59dfd879eb4ef63d53a68bbf9ce"}], "title": "perf/arm-cmn: Reject unsupported hardware configurations", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43150", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:15:10.201472Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "CWE-122 Heap-based Buffer Overflow"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-19T19:16:22.180Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43150", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:15:10.201472Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-122", "description": "CWE-122 Heap-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:15:10.783Z"}}], "cna": {"title": "perf/arm-cmn: Reject unsupported hardware configurations", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable CMN PMU driver is reached locally through platform-device probing and later local perf/debugfs interfaces, not through network or adjacent protocols. A local user can exercise the registered PMU with perf_event_open on an affected system.\nAC:L - Once the kernel is running on an over-large unsupported CMN configuration that the vulnerable driver accepted, triggering the bad paths is straightforward by opening aggregate CMN PMU events or reading the topology map. There is no attacker-contested race or probabilistic condition in the trigger path.\nPR:L - System-wide CMN PMU use is subject to perf_event_open policy and may require CAP_PERFMON/CAP_SYS_ADMIN on default hardened systems, but reasonable deployments allow unprivileged perf access or expose the 0444 debugfs map. Under the required higher-severity choice, a basic local user is sufficient.\nUI:N - No victim user action is needed after the attacker has local access on the affected system. The attacker can invoke perf_event_open or read the exposed debugfs file directly.\nS:U - The corruption occurs inside the host kernel driver and affects the same kernel security authority. There is no VM escape, IOMMU bypass, or cross-authority boundary demonstrated.\nC:H - The bug is explicitly about preventing array overflows and memory corruption in kernel data structures used by the PMU driver. Such kernel memory corruption can reasonably be leveraged for high-impact information disclosure.\nI:H - The unsupported topology can drive out-of-bounds writes in fixed-size PMU bookkeeping arrays or debugfs stack data. Kernel out-of-bounds writes are high-integrity impact because they can corrupt control/data structures and may be exploitable for code execution.\nA:H - The same memory corruption can readily crash or hang the kernel even if not weaponized for privilege escalation. A local trigger can therefore cause high availability impact."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "28fa550a49e818d6445e787f584759b1bf21d9d4", "lessThan": "7e2c200010aa93fa78201da959b4ac6b9f8fed0b", "versionType": "git"}, {"status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "d3e837e11ee9ed08df229272319199003ba00379", "versionType": "git"}, {"status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "00d69f21ef2ab00e6156c764d89e2b3539eb2f33", "versionType": "git"}, {"status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "08c7eadd8a934a1968e1aeeee8b61b853b99fb3a", "versionType": "git"}, {"status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "a251d866f50b6a4c95901fa722025065679c2eca", "versionType": "git"}, {"status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "lessThan": "36c0de02575ce59dfd879eb4ef63d53a68bbf9ce", "versionType": "git"}, {"status": "affected", "version": "6.1.63", "lessThan": "6.1.165", "versionType": "semver"}], "programFiles": ["drivers/perf/arm-cmn.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.5"}, {"status": "unaffected", "version": "0", "lessThan": "6.5", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.165", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.128", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.75", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.16", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/perf/arm-cmn.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/7e2c200010aa93fa78201da959b4ac6b9f8fed0b"}, {"url": "https://git.kernel.org/stable/c/d3e837e11ee9ed08df229272319199003ba00379"}, {"url": "https://git.kernel.org/stable/c/00d69f21ef2ab00e6156c764d89e2b3539eb2f33"}, {"url": "https://git.kernel.org/stable/c/08c7eadd8a934a1968e1aeeee8b61b853b99fb3a"}, {"url": "https://git.kernel.org/stable/c/a251d866f50b6a4c95901fa722025065679c2eca"}, {"url": "https://git.kernel.org/stable/c/36c0de02575ce59dfd879eb4ef63d53a68bbf9ce"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/arm-cmn: Reject unsupported hardware configurations\n\nSo far we've been fairly lax about accepting both unknown CMN models\n(at least with a warning), and unknown revisions of those which we\ndo know, as although things do frequently change between releases,\ntypically enough remains the same to be somewhat useful for at least\nsome basic bringup checks. However, we also make assumptions of the\nmaximum supported sizes and numbers of things in various places, and\nthere's no guarantee that something new might not be bigger and lead\nto nasty array overflows. Make sure we only try to run on things that\nactually match our assumptions and so will not risk memory corruption.\n\nWe have at least always failed on completely unknown node types, so\nupdate that error message for clarity and consistency too."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.165", "versionStartIncluding": "6.1.63"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.5"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.5"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.5"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.5"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0", "versionStartIncluding": "6.5"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T12:26:12.502Z"}}}, "cveMetadata": {"cveId": "CVE-2026-43150", "state": "PUBLISHED", "dateUpdated": "2026-10-19T19:16:22.180Z", "dateReserved": "2026-05-01T14:12:55.989Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-05-06T11:27:32.359Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/perf/arm-cmn.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "7e2c200010aa93fa78201da959b4ac6b9f8fed0b", "status": "affected", "version": "28fa550a49e818d6445e787f584759b1bf21d9d4", "versionType": "git"}, {"lessThan": "d3e837e11ee9ed08df229272319199003ba00379", "status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "versionType": "git"}, {"lessThan": "00d69f21ef2ab00e6156c764d89e2b3539eb2f33", "status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "versionType": "git"}, {"lessThan": "08c7eadd8a934a1968e1aeeee8b61b853b99fb3a", "status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "versionType": "git"}, {"lessThan": "a251d866f50b6a4c95901fa722025065679c2eca", "status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "versionType": "git"}, {"lessThan": "36c0de02575ce59dfd879eb4ef63d53a68bbf9ce", "status": "affected", "version": "7819e05a0dceac20c5ff78ec9b252faf3b76b824", "versionType": "git"}, {"lessThan": "6.1.165", "status": "affected", "version": "6.1.63", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/perf/arm-cmn.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.5"}, {"lessThan": "6.5", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.165", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.128", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.75", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.16", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD1E11C2-5A82-49FA-B142-61E121FD4529", "versionEndExcluding": "6.1.165", "versionStartIncluding": "6.1.63", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A502C6C1-0CFB-4C9B-8A24-C76507206FA7", "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.5", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2", "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/arm-cmn: Reject unsupported hardware configurations\n\nSo far we've been fairly lax about accepting both unknown CMN models\n(at least with a warning), and unknown revisions of those which we\ndo know, as although things do frequently change between releases,\ntypically enough remains the same to be somewhat useful for at least\nsome basic bringup checks. However, we also make assumptions of the\nmaximum supported sizes and numbers of things in various places, and\nthere's no guarantee that something new might not be bigger and lead\nto nasty array overflows. Make sure we only try to run on things that\nactually match our assumptions and so will not risk memory corruption.\n\nWe have at least always failed on completely unknown node types, so\nupdate that error message for clarity and consistency too."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nperf/arm-cmn: Rechazar configuraciones de hardware no compatibles\n\nHasta ahora hemos sido bastante permisivos al aceptar tanto modelos CMN desconocidos (al menos con una advertencia) como revisiones desconocidas de aquellos que s\u00ed conocemos, ya que, aunque las cosas cambian con frecuencia entre versiones, normalmente lo suficiente permanece igual para ser algo \u00fatil para al menos algunas comprobaciones b\u00e1sicas de arranque. Sin embargo, tambi\u00e9n hacemos suposiciones sobre los tama\u00f1os m\u00e1ximos admitidos y el n\u00famero de elementos en varios lugares, y no hay garant\u00eda de que algo nuevo no pueda ser m\u00e1s grande y provocar desbordamientos de array desagradables. Asegur\u00e9monos de que solo intentamos ejecutar en cosas que realmente coincidan con nuestras suposiciones y as\u00ed no arriesgaremos la corrupci\u00f3n de memoria.\n\nAl menos siempre hemos fallado en tipos de nodos completamente desconocidos, as\u00ed que actualicemos ese mensaje de error para mayor claridad y consistencia tambi\u00e9n."}], "id": "CVE-2026-43150", "lastModified": "2026-11-11T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43150", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:15:10.201472Z", "version": "2.0.3"}}]}, "published": "2026-05-06T12:16:32.690", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/00d69f21ef2ab00e6156c764d89e2b3539eb2f33"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/08c7eadd8a934a1968e1aeeee8b61b853b99fb3a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/36c0de02575ce59dfd879eb4ef63d53a68bbf9ce"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7e2c200010aa93fa78201da959b4ac6b9f8fed0b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a251d866f50b6a4c95901fa722025065679c2eca"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d3e837e11ee9ed08df229272319199003ba00379"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-122"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"bugzilla": {"description": "kernel: perf/arm-cmn: Reject unsupported hardware configurations", "id": "2467166", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467166"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-131", "details": ["A flaw was found in the Linux kernel. This vulnerability occurs when the kernel's `perf/arm-cmn` component encounters unsupported hardware configurations, such as unknown Coherent Mesh Network (CMN) models or revisions. The kernel makes assumptions about hardware sizes, and if these are violated, it can lead to array overflows. This could result in memory corruption, potentially affecting system stability and integrity."], "name": "CVE-2026-43150", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43150\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43150\nhttps://lore.kernel.org/linux-cve-announce/2026050628-CVE-2026-43150-987f@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[28fa550a49e818d6445e787f584759b1bf21d9d4,7e2c200010aa93fa78201da959b4ac6b9f8fed0b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7819e05a0dceac20c5ff78ec9b252faf3b76b824,d3e837e11ee9ed08df229272319199003ba00379)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7819e05a0dceac20c5ff78ec9b252faf3b76b824,00d69f21ef2ab00e6156c764d89e2b3539eb2f33)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7819e05a0dceac20c5ff78ec9b252faf3b76b824,08c7eadd8a934a1968e1aeeee8b61b853b99fb3a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7819e05a0dceac20c5ff78ec9b252faf3b76b824,a251d866f50b6a4c95901fa722025065679c2eca)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[7819e05a0dceac20c5ff78ec9b252faf3b76b824,36c0de02575ce59dfd879eb4ef63d53a68bbf9ce)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.5"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.5)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.165,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.128,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.75,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.16,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.6,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-06T15:00:06.615716+00:00", "updated": "2026-10-19T22:30:04.765029+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-122", "CWE-131", "CWE-787"]}