CVE-2026-43148
MediumSummary
A vulnerability in the Linux kernel related to the lack of error checking for the kcalloc() function in parse_thread_groups() has been resolved. The absence of this check could lead to a NULL pointer dereference.
Risk Assessment
Organizations may be exposed to system crashes or unexpected application behavior, potentially resulting in data loss or service downtime.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and implement additional testing to monitor system stability.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() As kcalloc() may fail, check its return value to avoid a NULL pointer dereference when passing it to of_property_read_u32_array().