CVE-2026-43108: soc: qcom: pd-mapper: Fix element length in servreg_loc_pfr_req_ei
In the Linux kernel, the following vulnerability has been resolved:
soc: qcom: pd-mapper: Fix element length in servreglocpfrreqei
It looks element length declared in servreglocpfrreqei for reason not matching servreglocpfrreq's reason field due which we could observe decoding error on PD crash.
qmidecodestringelem: String len 81 >= Max Len 65
Fix this by matching with servreglocpfrreq's reason field.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-nvidiato a version that resolves this vulnerability.Fixed in 7.0.0-1006.6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.85-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.14-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43108?
CVE-2026-43108 has been classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2026-43108?
To fix CVE-2026-43108, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.
Which software is affected by CVE-2026-43108?
CVE-2026-43108 affects the Linux kernel, specifically the qcom pd-mapper component.
What does CVE-2026-43108 involve?
CVE-2026-43108 involves an issue with the element length declaration in the servreg_loc_pfr_req_ei function.
Is there a public exploit for CVE-2026-43108?
As of now, there are no publicly reported exploits for CVE-2026-43108.