CVE-2026-43287
Description
In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg DRM_IOCTL_MODE_CREATEPROPBLOB allows userspace to allocate arbitrary-sized property blobs backed by kernel memory. Currently, the blob data allocation is not accounted to the allocating process's memory cgroup, allowing unprivileged users to trigger unbounded kernel memory consumption and potentially cause system-wide OOM. Mark the property blob data allocation with GFP_KERNEL_ACCOUNT so that the memory is properly charged to the caller's memcg. This ensures existing cgroup memory limits apply and prevents uncontrolled kernel memory growth without introducing additional policy or per-file limits.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| sles | affected | | |
| debian | bookworm | fixed | 6.1.170-1 |
| debian | bullseye | fixed | 5.10.257-1 |
| debian | forky | fixed | 6.19.6-1 |
| debian | sid | fixed | 6.19.6-1 |
| debian | trixie | fixed | 6.12.85-1 |
| linux-kernel | affected | 5.10.252 | |
| linux-kernel | 7.0 | affected | |
References
- https://git.kernel.org/stable/c/26b4309a3ab82a0697751cde52eb336c29c19035
- https://git.kernel.org/stable/c/405fd652d8fedff219a8f48daf8f20e881e303ab
- https://git.kernel.org/stable/c/815fa29cab3c67bebb9d0b5f41145cdd3a14d04d
- https://git.kernel.org/stable/c/866e0c1a9e7244d58ed74853cb22b81e1900cfdd
- https://git.kernel.org/stable/c/8e1664b9ee43608eb973d357ae5d858d30cbc9ca
- https://git.kernel.org/stable/c/b6117210ed349356f8e6027ff020b4d620bca42b
- https://git.kernel.org/stable/c/bbfaa5761f589a81031b493cb01275a990d6fb25
- https://git.kernel.org/stable/c/cb8b9a1755fe9f38e4fb7f287486d7e7fab3dba4
- https://www.suse.com/security/cve/CVE-2026-43287.html
- https://security-tracker.debian.org/tracker/CVE-2026-43287
CWEs
CWE-401
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.