CVE 7.8 HIGH

perf/arm-cmn: Reject unsupported hardware configurations_CVE-2026-43150

7.8 / 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved:

perf/arm-cmn: Reject unsupported hardware configurations

So far we've been fairly lax about accepting both unknown CMN models
(at least with a warning), and unknown revisions of those which we
do know, as although things do frequently change between releases,
typically enough remains the same to be somewhat useful for at least
some basic bringup checks. However, we also make assumptions of the
maximum supported sizes and numbers of things in various places, and
there's no guarantee that something new might not be bigger and lead
to nasty array overflows. Make sure we only try to run on things that
actually match our assumptions and so will not risk memory corruption.

We have at least always failed on completely unknown node types, so
update that error message for clarity and consistency too.

Basic Information

ID CVE-2026-43150
Source Linux
Published May 6, 2026 at 11:27
Modified May 8, 2026 at 12:40

Affected Product

Vendor Linux
Product Linux
Version 28fa550a49e818d6445e787f584759b1bf21d9d4
Affected Versions Linux Linux 28fa550a49e818d6445e787f584759b1bf21d9d4
Linux Linux 7819e05a0dceac20c5ff78ec9b252faf3b76b824
Linux Linux 7819e05a0dceac20c5ff78ec9b252faf3b76b824
Linux Linux 7819e05a0dceac20c5ff78ec9b252faf3b76b824
Linux Linux 7819e05a0dceac20c5ff78ec9b252faf3b76b824
Linux Linux 7819e05a0dceac20c5ff78ec9b252faf3b76b824
Linux Linux 6.5

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.