CVE-2026-43266
MediumSummary
A vulnerability has been identified in the Linux kernel related to the logic in GHES/CPER, which does not detect if the section length is too large. This may lead to improper processing of CPER records for ARM processors.
Risk Assessment
This vulnerability may lead to system instability and security issues, potentially affecting the integrity of the entire IT infrastructure. If exploited by an attacker, it could result in serious data integrity problems.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been patched. Additionally, monitor systems for unauthorized changes in firmware.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't go past the ARM processor CPER record buffer There's a logic inside GHES/CPER to detect if the section_length is too small, but it doesn't detect if it is too big. Currently, if the firmware receives an ARM proces