CVE-2026-43248
MediumSummary
A vulnerability in the Linux kernel related to vhost has been resolved by moving the vdpa group bound check to vhost_vdpa. This reduces duplication and lowers the risk of a parent driver missing them.
Risk Assessment
The lack of proper checks may lead to unauthorized access or system malfunctions, jeopardizing the stability and security of the infrastructure.
Recommendation
It is recommended to update the Linux kernel to the latest version to benefit from the fixes related to this vulnerability.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa Remove duplication by consolidating these here. This reduces the posibility of a parent driver missing them. While we're at it, fix a bug in vdpa_sim where a valid ASID can be ass