CVE-2026-43248

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-43248

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2026-43248

Downstream

Published

2026-05-06T11:28:39.578Z

Modified

2026-05-28T03:55:16.834839447Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

vhost: move vdpa group bound check to vhost_vdpa

Details

In the Linux kernel, the following vulnerability has been resolved:

vhost: move vdpa group bound check to vhost_vdpa

Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them.

While we're at it, fix a bug in vdpa_sim where a valid ASID can be assigned to a group equal to ngroups, causing an out of bound write.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43248.json",
    "cna_assigner": "Linux"
}

References

Affected packages

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

bda324fd037a6b0d44da5699574ce741ca161bc4

Fixed

ddb57354634b6ba851b79da45f1de42c646f27d0

Fixed

7441d35d14d9a3d66d925d90cb73c75394e6d454

Fixed

406db68f9cb976a8ddfafd631197264f2307e9c9

Fixed

cd025c1e876b4e262e71398236a1550486a73ede

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43248.json"

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43248.json"