Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel 6.6.157.1-1 can write beyond memory
published 6 months ago
Summary
The Linux kernel version 6.6.157.1-1 contains a coding error in its virtual device driver that may write data outside the intended memory area. This could lead to system instability or allow an attacker to take control. Apply the latest kernel updates that include the fix.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | azure | kernel | <= 6.6.150.1-1 |
| Azure Linux:3 | – | kernel |
<= 6.6.157.1-1 <= 6.6.152.1-1 |
Original advisory text
CVE-2026-43248 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:
vhost: move vdpa group bound check to vhost_vdpa
Remove duplication by consolidating these here. This reduces the
posibility of a parent driver missing them.
While we're at it, fix a bug in vdpa_sim where a valid ASID can be
assigned to a group equal to ngroups, causing an out of bound write.
vhost: move vdpa group bound check to vhost_vdpa
Remove duplication by consolidating these here. This reduces the
posibility of a parent driver missing them.
While we're at it, fix a bug in vdpa_sim where a valid ASID can be
assigned to a group equal to ngroups, causing an out of bound write.
References
Timeline
Published6 May 2026
Updated24 Sep 2026
First seen23 Sep 2026
Sources
AZL-85782 · OSV
Track software like this
Free during beta