CVE-2026-43148

powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()

MEDIUM

5.5

CVSS Score

Published: May 6, 2026 at 11:27 AM UTC

Updated: June 17, 2026 at 10:49 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/smp: Add check for kcalloc() failure in parse_thread_groups() As kcalloc() may fail, check its return value to avoid a NULL pointer dereference when passing it to of_property_read_u32_array().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.11 ≤ v < 5.15.2025.11 ≤ v < 6.1.1655.11 ≤ v < 6.12.755.11 ≤ v < 6.18.165.11 ≤ v < 6.19.65.11 ≤ v < 6.6.1285.11 ≤ v < 7.05.16 ≤ v < 6.1.1656.13 ≤ v < 6.18.166.19 ≤ v < 6.19.66.2 ≤ v < 6.6.1286.7 ≤ v < 6.12.755.11790a1662d3a26fe9fa5f691386d8fde6bb8b0dc2

Vendor states this is fixed in 1de31dba19c3cd0c1caf388a286b46df638f0b91 (fixed)

Vendor states this is fixed in 33c1c6d8a28a2761ac74b0380b2563cf546c2a3a (fixed)

Vendor states this is fixed in 8b221db0b7d24675e465e98d9326d298025a4e8d (fixed)

Vendor states this is fixed in 9b85c8f624b0f8cf9b932f5a65dacd56a1f47a72 (fixed)

Vendor states this is fixed in 9d0ca11258e7b452653d04310addfec1753de1a2 (fixed)

Vendor states this is fixed in b265e53d9adfbb5751713185843f7188aa9dd066 (fixed)

Vendor states this is fixed in ca46d2092f307385a7acfb42632056570d6dbbbc (fixed)

Vendor states this is fixed in 5.11 (unaffected)

Vendor states this is fixed in 5.15.202 (unaffected)

Vendor states this is fixed in 6.1.165 (unaffected)

Vendor states this is fixed in 6.12.75 (unaffected)

Vendor states this is fixed in 6.18.16 (unaffected)