CVE-2026-43171

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43171", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:55.990Z", "datePublished": "2026-05-06T11:27:46.698Z", "dateUpdated": "2026-11-06T15:32:35.552Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:19:09.627Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nEFI/CPER: don't dump the entire memory region\n\nThe current logic at cper_print_fw_err() doesn't check if the\nerror record length is big enough to handle offset. On a bad firmware,\nif the ofset is above the actual record, length -= offset will\nunderflow, making it dump the entire memory.\n\nThe end result can be:\n\n - the logic taking a lot of time dumping large regions of memory;\n - data disclosure due to the memory dumps;\n - an OOPS, if it tries to dump an unmapped memory region.\n\nFix it by checking if the section length is too small before doing\na hex dump.\n\n[ rjw: Subject tweaks ]"}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/firmware/efi/cper.c"], "versions": [{"version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "02de64ab54b4bb0f1b21bb324aeff3b08612be33", "status": "affected", "versionType": "git"}, {"version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "0e09b522f2622841389c3b2f9ac4969e35c0809d", "status": "affected", "versionType": "git"}, {"version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "64ae5aaa7ac93c83da456039e8ec747bfa8a7cff", "status": "affected", "versionType": "git"}, {"version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "5a9b1dda8481b82851a655c3bcc5b44879b95334", "status": "affected", "versionType": "git"}, {"version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "7780c0bad2a3a70a8c0113a33c02f4151d901eb3", "status": "affected", "versionType": "git"}, {"version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91", "status": "affected", "versionType": "git"}, {"version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "54e131db4cdffd946db890ff33ff2647053fd4f6", "status": "affected", "versionType": "git"}, {"version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "55cc6fe5716f678f06bcb95140882dfa684464ec", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/firmware/efi/cper.c"], "versions": [{"version": "5.7", "status": "affected"}, {"version": "0", "lessThan": "5.7", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.252", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.202", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.165", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.128", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.75", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.16", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.6", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "5.10.252"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "5.15.202"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.1.165"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.6.128"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.12.75"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.18.16"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "6.19.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.7", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/02de64ab54b4bb0f1b21bb324aeff3b08612be33"}, {"url": "https://git.kernel.org/stable/c/0e09b522f2622841389c3b2f9ac4969e35c0809d"}, {"url": "https://git.kernel.org/stable/c/64ae5aaa7ac93c83da456039e8ec747bfa8a7cff"}, {"url": "https://git.kernel.org/stable/c/5a9b1dda8481b82851a655c3bcc5b44879b95334"}, {"url": "https://git.kernel.org/stable/c/7780c0bad2a3a70a8c0113a33c02f4151d901eb3"}, {"url": "https://git.kernel.org/stable/c/a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91"}, {"url": "https://git.kernel.org/stable/c/54e131db4cdffd946db890ff33ff2647053fd4f6"}, {"url": "https://git.kernel.org/stable/c/55cc6fe5716f678f06bcb95140882dfa684464ec"}], "title": "EFI/CPER: don't dump the entire memory region", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43171", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:30:26.784250Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:32:35.552Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43171", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:30:26.784250Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:30:27.836Z"}}], "cna": {"title": "EFI/CPER: don't dump the entire memory region", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "02de64ab54b4bb0f1b21bb324aeff3b08612be33", "versionType": "git"}, {"status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "0e09b522f2622841389c3b2f9ac4969e35c0809d", "versionType": "git"}, {"status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "64ae5aaa7ac93c83da456039e8ec747bfa8a7cff", "versionType": "git"}, {"status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "5a9b1dda8481b82851a655c3bcc5b44879b95334", "versionType": "git"}, {"status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "7780c0bad2a3a70a8c0113a33c02f4151d901eb3", "versionType": "git"}, {"status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91", "versionType": "git"}, {"status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "54e131db4cdffd946db890ff33ff2647053fd4f6", "versionType": "git"}, {"status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "lessThan": "55cc6fe5716f678f06bcb95140882dfa684464ec", "versionType": "git"}], "programFiles": ["drivers/firmware/efi/cper.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.7"}, {"status": "unaffected", "version": "0", "lessThan": "5.7", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.252", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.202", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.165", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.128", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.75", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.16", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/firmware/efi/cper.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/02de64ab54b4bb0f1b21bb324aeff3b08612be33"}, {"url": "https://git.kernel.org/stable/c/0e09b522f2622841389c3b2f9ac4969e35c0809d"}, {"url": "https://git.kernel.org/stable/c/64ae5aaa7ac93c83da456039e8ec747bfa8a7cff"}, {"url": "https://git.kernel.org/stable/c/5a9b1dda8481b82851a655c3bcc5b44879b95334"}, {"url": "https://git.kernel.org/stable/c/7780c0bad2a3a70a8c0113a33c02f4151d901eb3"}, {"url": "https://git.kernel.org/stable/c/a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91"}, {"url": "https://git.kernel.org/stable/c/54e131db4cdffd946db890ff33ff2647053fd4f6"}, {"url": "https://git.kernel.org/stable/c/55cc6fe5716f678f06bcb95140882dfa684464ec"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nEFI/CPER: don't dump the entire memory region\n\nThe current logic at cper_print_fw_err() doesn't check if the\nerror record length is big enough to handle offset. On a bad firmware,\nif the ofset is above the actual record, length -= offset will\nunderflow, making it dump the entire memory.\n\nThe end result can be:\n\n - the logic taking a lot of time dumping large regions of memory;\n - data disclosure due to the memory dumps;\n - an OOPS, if it tries to dump an unmapped memory region.\n\nFix it by checking if the section length is too small before doing\na hex dump.\n\n[ rjw: Subject tweaks ]"}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.252", "versionStartIncluding": "5.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.165", "versionStartIncluding": "5.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.128", "versionStartIncluding": "5.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.75", "versionStartIncluding": "5.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.16", "versionStartIncluding": "5.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.6", "versionStartIncluding": "5.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0", "versionStartIncluding": "5.7"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:19:09.627Z"}}}, "cveMetadata": {"cveId": "CVE-2026-43171", "state": "PUBLISHED", "dateUpdated": "2026-11-06T15:32:35.552Z", "dateReserved": "2026-05-01T14:12:55.990Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-05-06T11:27:46.698Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/firmware/efi/cper.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "02de64ab54b4bb0f1b21bb324aeff3b08612be33", "status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "versionType": "git"}, {"lessThan": "0e09b522f2622841389c3b2f9ac4969e35c0809d", "status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "versionType": "git"}, {"lessThan": "64ae5aaa7ac93c83da456039e8ec747bfa8a7cff", "status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "versionType": "git"}, {"lessThan": "5a9b1dda8481b82851a655c3bcc5b44879b95334", "status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "versionType": "git"}, {"lessThan": "7780c0bad2a3a70a8c0113a33c02f4151d901eb3", "status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "versionType": "git"}, {"lessThan": "a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91", "status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "versionType": "git"}, {"lessThan": "54e131db4cdffd946db890ff33ff2647053fd4f6", "status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "versionType": "git"}, {"lessThan": "55cc6fe5716f678f06bcb95140882dfa684464ec", "status": "affected", "version": "3d8c11efd528d56972d44ed0de51c4e11a9a4fa9", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/firmware/efi/cper.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.7"}, {"lessThan": "5.7", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.252", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.202", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.165", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.128", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.75", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.16", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "92C4581E-88B3-4AD3-AEE8-AA42DF330D60", "versionEndExcluding": "5.10.252", "versionStartExcluding": "5.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4002FC2B-1456-4666-B240-0EBF590C4671", "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "797C7F46-D0BE-4FB8-A502-C5EF8E6B6654", "versionEndExcluding": "6.1.165", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "851E9353-6C09-4CC9-877E-E09DB164A3C2", "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2", "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.7:-:*:*:*:*:*:*", "matchCriteriaId": "3D23CE42-BDB2-4216-8495-230ABE98FCDD", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:5.7:rc7:*:*:*:*:*:*", "matchCriteriaId": "9D26AE9C-D49F-4FE9-8A6A-5A7199B7436E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nEFI/CPER: don't dump the entire memory region\n\nThe current logic at cper_print_fw_err() doesn't check if the\nerror record length is big enough to handle offset. On a bad firmware,\nif the ofset is above the actual record, length -= offset will\nunderflow, making it dump the entire memory.\n\nThe end result can be:\n\n - the logic taking a lot of time dumping large regions of memory;\n - data disclosure due to the memory dumps;\n - an OOPS, if it tries to dump an unmapped memory region.\n\nFix it by checking if the section length is too small before doing\na hex dump.\n\n[ rjw: Subject tweaks ]"}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nEFI/CPER: no volcar toda la regi\u00f3n de memoria\n\nLa l\u00f3gica actual en cper_print_fw_err() no comprueba si la longitud del registro de error es lo suficientemente grande para manejar el desplazamiento. En un firmware defectuoso, si el desplazamiento est\u00e1 por encima del registro real, length -= offset desbordar\u00e1 negativamente, haciendo que vuelque toda la memoria.\n\nEl resultado final puede ser:\n\n - la l\u00f3gica tardando mucho tiempo en volcar grandes regiones de memoria;\n - divulgaci\u00f3n de datos debido a los volcados de memoria;\n - un OOPS, si intenta volcar una regi\u00f3n de memoria no mapeada.\n\nSolucionarlo comprobando si la longitud de la secci\u00f3n es demasiado peque\u00f1a antes de realizar un volcado hexadecimal.\n\n[ rjw: Ajustes del asunto ]"}], "id": "CVE-2026-43171", "lastModified": "2026-11-11T20:10:00.273", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43171", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T15:30:26.784250Z", "version": "2.0.3"}}]}, "published": "2026-05-06T12:16:35.447", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/02de64ab54b4bb0f1b21bb324aeff3b08612be33"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/0e09b522f2622841389c3b2f9ac4969e35c0809d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/54e131db4cdffd946db890ff33ff2647053fd4f6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/55cc6fe5716f678f06bcb95140882dfa684464ec"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5a9b1dda8481b82851a655c3bcc5b44879b95334"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/64ae5aaa7ac93c83da456039e8ec747bfa8a7cff"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/7780c0bad2a3a70a8c0113a33c02f4151d901eb3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-191"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: EFI/CPER: don't dump the entire memory region", "id": "2467122", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467122"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-191", "details": ["A flaw was found in the Linux kernel's EFI/CPER component. This vulnerability occurs because the `cper_print_fw_err()` function does not adequately validate the length of error records against a provided offset. A malicious or malformed firmware could exploit this by providing an offset that causes an integer underflow, leading to the dumping of large memory regions. This can result in sensitive data disclosure or a system crash (Denial of Service)."], "name": "CVE-2026-43171", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43171\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43171\nhttps://lore.kernel.org/linux-cve-announce/2026050635-CVE-2026-43171-8549@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,02de64ab54b4bb0f1b21bb324aeff3b08612be33)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,0e09b522f2622841389c3b2f9ac4969e35c0809d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,64ae5aaa7ac93c83da456039e8ec747bfa8a7cff)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,5a9b1dda8481b82851a655c3bcc5b44879b95334)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,7780c0bad2a3a70a8c0113a33c02f4151d901eb3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b8f1b8a0c1fc7321cac2,a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b8f1b8a0c1fc7321cac2,54e131db4cdffd946db890ff33ff2647053fd4f6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b8f1b8a0c1fc7321cac2,55cc6fe5716f678f06bcb95140882dfa684464ec)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.252,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.202,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.165,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.128,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.75,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.16,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.6,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-06T14:15:05.987439+00:00", "updated": "2026-05-13T17:30:06.823770+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}