Answer in brief
CVE-2026-43171 records a Unknown severity vulnerability in EFI/CPER: don't dump the entire memory region. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <02de64ab54b4bb0f1b21bb324aeff3b08612be33 || >=3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <0e09b522f2622841389c3b2f9ac4969e35c0809d || >=3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <64ae5aaa7ac93c83da456039e8ec747bfa8a7cff || >=3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <5a9b1dda8481b82851a655c3bcc5b44879b95334 || >=3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <7780c0bad2a3a70a8c0113a33c02f4151d901eb3 || >=3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91 || >=3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <54e131db4cdffd946db890ff33ff2647053fd4f6 || >=3d8c11efd528d56972d44ed0de51c4e11a9a4fa9 <55cc6fe5716f678f06bcb95140882dfa684464ec | 02de64ab54b4bb0f1b21bb324aeff3b08612be33, 0e09b522f2622841389c3b2f9ac4969e35c0809d, 64ae5aaa7ac93c83da456039e8ec747bfa8a7cff, 5a9b1dda8481b82851a655c3bcc5b44879b95334, 7780c0bad2a3a70a8c0113a33c02f4151d901eb3, a8419f5f2c5f2d80848ddabb2b95cf0da84a5f91, 54e131db4cdffd946db890ff33ff2647053fd4f6, 55cc6fe5716f678f06bcb95140882dfa684464ec |
| Linux/Linuxgeneric | 5.7 | Not reported |
Published upstream
May 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cper_print_fw_err() doesn't check if the error record length is big enough to handle offset. On a bad firmware, if the ofset is above the actual record, length -= offset will underflow, making it dump the entire memory. The end result can be: - the logic taking a lot of time dumping large regions of memory; - data disclosure due to the memory dumps; - an OOPS, if it tries to dump an unmapped memory region. Fix it by checking if the section length is too small before doing a hex dump. [ rjw: Subject tweaks ]
Quoted source text, attributed separately from HOL analysis.