Answer in brief
CVE-2026-43272 records a Unknown severity vulnerability in ring-buffer: Fix possible dereference of uninitialized pointer. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 <a4afdff9c715af50cf6c3f2dc601932c2cea17a2 || >=5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 <bc77986f3cb7476637052edf2d87137fa39f153d || >=5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 <d9942396845fef2369478c157b26738fe07142f6 || >=5f3b6e839f3ceb8d6ef02231ba9b5aca71b8bf55 <f1547779402c4cd67755c33616b7203baa88420b | a4afdff9c715af50cf6c3f2dc601932c2cea17a2, bc77986f3cb7476637052edf2d87137fa39f153d, d9942396845fef2369478c157b26738fe07142f6, f1547779402c4cd67755c33616b7203baa88420b |
| Linux/Linuxgeneric | 6.12 | Not reported |
Published upstream
May 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 21, 2026
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitialized pointer There is a pointer head_page in rb_meta_validate_events() which is not initialized at the beginning of a function. This pointer can be dereferenced if there is a failure during reader page validation. In this case the control is passed to "invalid" label where the pointer is dereferenced in a loop. To fix the issue initialize orig_head and head_page before calling rb_validate_buffer. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Quoted source text, attributed separately from HOL analysis.