Out-of-Bounds Read in Linux Kernel's madvise Function

CVE-2026-43280

What is CVE-2026-43280?

A vulnerability in the Linux kernel allows for an out-of-bounds read through the madvise IOCTL when a user supplies an invalid pat_index value. The function xe_pat_index_get_coh_mode() performs unchecked array access, which can lead to unauthorized data exposure. Although there are debug warnings in place, the unsafe access still occurs in production environments, potentially enabling an attacker to exploit this oversight.

References