CVE-2026-43148

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-06 Modified: 2026-11-11 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() As kcalloc() may fail, check its return value to avoid a NULL pointer dereference when passing it to of_property_read_u32_array().

Weakness Classification (1)

Affected Software (9)

VendorProductVersion
Linux Linux 790a1662d3a26fe9fa5f691386d8fde6bb8b0dc2 < 1de31dba19c3cd0c1caf388a286b46df638f0b91
Linux Linux 790a1662d3a26fe9fa5f691386d8fde6bb8b0dc2 < b265e53d9adfbb5751713185843f7188aa9dd066
Linux Linux 790a1662d3a26fe9fa5f691386d8fde6bb8b0dc2 < 9d0ca11258e7b452653d04310addfec1753de1a2
Linux Linux 790a1662d3a26fe9fa5f691386d8fde6bb8b0dc2 < ca46d2092f307385a7acfb42632056570d6dbbbc
Linux Linux 790a1662d3a26fe9fa5f691386d8fde6bb8b0dc2 < 9b85c8f624b0f8cf9b932f5a65dacd56a1f47a72
Linux Linux 790a1662d3a26fe9fa5f691386d8fde6bb8b0dc2 < 8b221db0b7d24675e465e98d9326d298025a4e8d
Linux Linux 790a1662d3a26fe9fa5f691386d8fde6bb8b0dc2 < 33c1c6d8a28a2761ac74b0380b2563cf546c2a3a
Linux Linux 5.11
linux linux_kernel 5.11 – 5.15.202

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001280
Percentile 2.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00128
2026-11-12
0.00128
2026-11-10
0.00128
2026-11-09
0.00128
2026-11-08
0.00128
2026-11-07
0.00128
2026-11-06
0.00128

Intelligence Sources

mitre ref →
nvd ref →