Linux Kernel Vulnerability Impacting ARM Processor Firmware Processing

CVE-2026-43266

What is CVE-2026-43266?

A vulnerability has been identified in the Linux kernel concerning the processing of firmware error records in ARM processors. The error stems from the kernel's ability to trust overly large section lengths in CPER records without appropriate validation. This could lead to excessive data dumps beyond the designated memory-mapped region, potentially causing significant operational issues. The resolution involves implementing logic to ensure that excessively large section lengths are appropriately flagged, thus improving the kernel's robustness against misleading firmware-generated error records.

References