CVE-2026-43045

Source
https://cve.org/CVERecord?id=CVE-2026-43045
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43045.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-43045
Downstream
Related
Published
2026-05-01T14:15:40.976Z
Modified
2026-06-02T18:29:29.125121144Z
Summary
mshv: Fix error handling in mshv_region_pin
Details

In the Linux kernel, the following vulnerability has been resolved:

mshv: Fix error handling in mshvregionpin

The current error handling has two issues:

First, pinuserpages_fast() can return a short pin count (less than requested but greater than zero) when it cannot pin all requested pages. This is treated as success, leading to partially pinned regions being used, which causes memory corruption.

Second, when an error occurs mid-loop, already pinned pages from the current batch are not properly accounted for before calling mshvregioninvalidate_pages(), causing a page reference leak.

Treat short pins as errors and fix partial batch accounting before cleanup.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43045.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
621191d709b14882270dfd8ea5d7d6cdfebe2c35
Fixed
a7d149152bc5a9119854331c57be35ad31fdf5cc
Fixed
c0e296f257671ba10249630fe58026f29e4804d9

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43045.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.15.0
Fixed
6.19.12

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43045.json"