Out-of-Bounds Read Vulnerability in Linux Kernel's Dentry Hashtable Management

CVE-2026-43071

What is CVE-2026-43071?

A vulnerability exists in the Linux kernel's management of the dentry hashtable, which can lead to an out-of-bounds read when the parameter 'dhash_entries' is set to 1. This condition results in insufficient bucket allocation, causing processes to access unallocated memory regions and potentially leading to system instability. The issue was resolved by enforcing a minimum of two buckets in the dentry hashtable, ensuring that calculations involving the d_hash_shift do not exceed the bit width of type u32, thus preventing the out-of-bounds access.

References