CVE-2026-43045: mshv: Fix error handling in mshv_region_pin
In the Linux kernel, the following vulnerability has been resolved:
mshv: Fix error handling in mshvregionpin
The current error handling has two issues:
First, pinuserpagesfast() can return a short pin count (less than requested but greater than zero) when it cannot pin all requested pages. This is treated as success, leading to partially pinned regions being used, which causes memory corruption.
Second, when an error occurs mid-loop, already pinned pages from the current batch are not properly accounted for before calling mshvregioninvalidatepages(), causing a page reference leak.
Treat short pins as errors and fix partial batch accounting before cleanup.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43045?
The severity of CVE-2026-43045 is currently under assessment but it addresses critical error handling issues in the Linux kernel.
How do I fix CVE-2026-43045?
To fix CVE-2026-43045, update to the latest version of the Linux kernel that includes the patch for mshv error handling.
Which software is affected by CVE-2026-43045?
CVE-2026-43045 affects the mshv component of the Linux kernel.
What does CVE-2026-43045 relate to?
CVE-2026-43045 relates to error handling in the mshv_region_pin function within the Linux kernel.
When was CVE-2026-43045 disclosed?
CVE-2026-43045 was disclosed as part of ongoing security updates for the Linux kernel.