Array Overflow Vulnerability in Intel Uncore Component of Linux Kernel

CVE-2026-43079

What is CVE-2026-43079?

A vulnerability exists in the Intel Uncore component of the Linux Kernel that can lead to an array overflow. This occurs when NUMA is disabled, and the system boots with fewer CPUs than those available in die 0. As a result, the discovery table continues to be parsed despite all CPUs in the respective die being offline, potentially triggering warnings or causing system instability. Specifically, the issue lies in the function uncore_pci_pmu_register(), which can attempt to access an array index that is out of bounds, leading to an overflow condition. Users are advised to monitor their systems for related warnings and apply relevant patches to mitigate these risks.

References