CVE-2026-43132

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-06 Modified: 2026-11-11 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_create() failure If either of the calls to dm_bufio_client_create() in verity_fec_ctr() fails, then dm_bufio_client_destroy() is later called with an ERR_PTR() argument. That causes a crash. Fix this.

Affected Software (10)

VendorProductVersion
Linux Linux a739ff3f543afbb4a041c16cd0182c8e8d366e70 < 6283e49af87a9c121bb01e5a64a7fe5706c210bc
Linux Linux a739ff3f543afbb4a041c16cd0182c8e8d366e70 < d3e1f1adc8a0289efe2d2cdc90edb8c6ffe0b5ef
Linux Linux a739ff3f543afbb4a041c16cd0182c8e8d366e70 < 5c2217ddb3b7e7ac25f4ebe9061258fc8f1c9167
Linux Linux a739ff3f543afbb4a041c16cd0182c8e8d366e70 < 031f2adc1499b112a39ac316bbab3c80bba16cf2
Linux Linux a739ff3f543afbb4a041c16cd0182c8e8d366e70 < 9b8dc1d327e2928f3da59ced0595d850d31c0936
Linux Linux a739ff3f543afbb4a041c16cd0182c8e8d366e70 < 451cc650e40e8c3222d37877a9e4be0fcaacb9c8
Linux Linux a739ff3f543afbb4a041c16cd0182c8e8d366e70 < b154a868a3856fb5216c4f82981d8a503832e095
Linux Linux a739ff3f543afbb4a041c16cd0182c8e8d366e70 < 119f4f04186fa4f33ee6bd39af145cdaff1ff17f
Linux Linux 4.5
linux linux_kernel 4.5 – 5.10.252

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001280
Percentile 2.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00128
2026-11-12
0.00128
2026-11-10
0.00128
2026-11-09
0.00128
2026-11-08
0.00128
2026-11-07
0.00128
2026-11-06
0.00128

Intelligence Sources

mitre ref →
nvd ref →