Answer in brief
CVE-2026-43132 records a Unknown severity vulnerability in dm-verity: correctly handle dm_bufio_client_create() failure. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=a739ff3f543afbb4a041c16cd0182c8e8d366e70 <6283e49af87a9c121bb01e5a64a7fe5706c210bc || >=a739ff3f543afbb4a041c16cd0182c8e8d366e70 <d3e1f1adc8a0289efe2d2cdc90edb8c6ffe0b5ef || >=a739ff3f543afbb4a041c16cd0182c8e8d366e70 <5c2217ddb3b7e7ac25f4ebe9061258fc8f1c9167 || >=a739ff3f543afbb4a041c16cd0182c8e8d366e70 <031f2adc1499b112a39ac316bbab3c80bba16cf2 || >=a739ff3f543afbb4a041c16cd0182c8e8d366e70 <9b8dc1d327e2928f3da59ced0595d850d31c0936 || >=a739ff3f543afbb4a041c16cd0182c8e8d366e70 <451cc650e40e8c3222d37877a9e4be0fcaacb9c8 || >=a739ff3f543afbb4a041c16cd0182c8e8d366e70 <b154a868a3856fb5216c4f82981d8a503832e095 || >=a739ff3f543afbb4a041c16cd0182c8e8d366e70 <119f4f04186fa4f33ee6bd39af145cdaff1ff17f | 6283e49af87a9c121bb01e5a64a7fe5706c210bc, d3e1f1adc8a0289efe2d2cdc90edb8c6ffe0b5ef, 5c2217ddb3b7e7ac25f4ebe9061258fc8f1c9167, 031f2adc1499b112a39ac316bbab3c80bba16cf2, 9b8dc1d327e2928f3da59ced0595d850d31c0936, 451cc650e40e8c3222d37877a9e4be0fcaacb9c8, b154a868a3856fb5216c4f82981d8a503832e095, 119f4f04186fa4f33ee6bd39af145cdaff1ff17f |
| Linux/Linuxgeneric | 4.5 | Not reported |
Published upstream
May 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create() in verity_fec_ctr() fails, then dm_bufio_client_destroy() is later called with an ERR_PTR() argument. That causes a crash. Fix this.
Quoted source text, attributed separately from HOL analysis.