CVE-2026-43277
MediumSummary
A vulnerability related to APEI/GHES has been resolved in the Linux kernel, which could lead to the allocation of overly large records. The logic in the ghes_new() function checks that records do not exceed the maximum size of GHES_ESTATUS_MAX_SIZE, currently set at 64KB.
Risk Assessment
This vulnerability could lead to memory allocation issues, potentially affecting system stability. Uncontrolled allocations may result in crashes or unpredictable system behavior.
Recommendation
It is recommended to update the Linux kernel to the latest version to eliminate this vulnerability. Regular monitoring and updating of the system is crucial for maintaining security.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ensure that won't go past CPER allocated record The logic at ghes_new() prevents allocating too large records, by checking if they're bigger than GHES_ESTATUS_MAX_SIZE (currently, 64KB). Yet, the allocation is done with