CVE-2026-43079 - Vulnerability Details

- perf/x86/intel/uncore: Skip discovery table for offline dies

Description

In the Linux kernel, the following vulnerability has been resolved:

perf/x86/intel/uncore: Skip discovery table for offline dies

This warning can be triggered if NUMA is disabled and the system
boots with fewer CPUs than the number of CPUs in die 0.

WARNING: CPU: 9 PID: 7257 at uncore.c:1157 uncore_pci_pmu_register+0x136/0x160 [intel_uncore]

Currently, the discovery table continues to be parsed even if all CPUs
in the associated die are offline. This can lead to an array overflow
at "pmu->boxes[die] = box" in uncore_pci_pmu_register(), which may
trigger the warning above or cause other issues.

Published: 2026-05-06

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A kernel array overflow can be triggered in the Intel uncore PMU discovery routine when a die is offline but still parsed, leading to a kernel warning or crash that renders the host unavailable.

Affected Systems

Any Linux kernel build before the commit that fixed the Intel uncore PMU discovery bug is affected. No specific kernel version is given, so older kernels lacking the fix are vulnerable.

Risk and Exploitability

The EPSS score is <1% and the vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation. The CVSS score of 5.5 reflects a medium‑severity buffer overflow, and while the attack conditions are boot‑time configurations, it is inferred that the defect could cause a denial of service if attacker‑controlled boot parameters are used.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`edae1f06c2cda41edffc93de6aedc8ba8dc883c3`	affected	< d18da11a5e21eac7651c8897e5e0908f6c2bc9de
`edae1f06c2cda41edffc93de6aedc8ba8dc883c3`	affected	< dfcba8c8674cead6c88a2f269b71aa4efd3d384a
`edae1f06c2cda41edffc93de6aedc8ba8dc883c3`	affected	< cfab2c817d2e7e0bee98d66850246ce842ed5f18
`edae1f06c2cda41edffc93de6aedc8ba8dc883c3`	affected	< 6cfc187d85f18f976d0fe527d4c6f6171542cc19
`edae1f06c2cda41edffc93de6aedc8ba8dc883c3`	affected	< f34feda8e0c9535fee3f8870ce8bab53c2798f71
`edae1f06c2cda41edffc93de6aedc8ba8dc883c3`	affected	< 7a2cb02437d92ed14fe494d8994056d5bd2c72b4
`edae1f06c2cda41edffc93de6aedc8ba8dc883c3`	affected	< 7b568e9eba2fad89a696f22f0413d44cf4a1f892

Linux

affected

Version	Status	Constraints
`5.13`	affected	—
`0`	unaffected	< 5.13
`5.15.209`	unaffected	≤ 5.15.*
`6.1.175`	unaffected	≤ 6.1.*
`6.6.136`	unaffected	≤ 6.6.*
`6.12.83`	unaffected	≤ 6.12.*
`6.18.24`	unaffected	≤ 6.18.*
`6.19.14`	unaffected	≤ 6.19.*
`7.0`	unaffected	≤ *

Configuration 1 [-]

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel:7.0:rc1::::::
	cpe:2.3:o:linux:linux_kernel:7.0:rc2::::::
	cpe:2.3:o:linux:linux_kernel:7.0:rc3::::::
	cpe:2.3:o:linux:linux_kernel:7.0:rc4::::::
	cpe:2.3:o:linux:linux_kernel:7.0:rc5::::::
	cpe:2.3:o:linux:linux_kernel:7.0:rc6::::::
	cpe:2.3:o:linux:linux_kernel:7.0:rc7::::::

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[edae1f06c2cda41edffc93de6aedc8ba8dc883c3,cfab2c817d2e7e0bee98d66850246ce842ed5f18)`	affected	code_commit	—
`[edae1f06c2cda41edffc93de6aedc8ba8dc883c3,6cfc187d85f18f976d0fe527d4c6f6171542cc19)`	affected	code_commit	—
`[edae1f06c2cda41edffc93de6aedc8ba8dc883c3,f34feda8e0c9535fee3f8870ce8bab53c2798f71)`	affected	code_commit	—
`[edae1f06c2cda41edffc93de6aedc8ba8dc883c3,7a2cb02437d92ed14fe494d8994056d5bd2c72b4)`	affected	code_commit	—
`[edae1f06c2cda41edffc93de6aedc8ba8dc883c3,7b568e9eba2fad89a696f22f0413d44cf4a1f892)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`5.13`	affected	generic	—
`[0,5.13)`	unaffected	semver	—
`[6.6.136,6.7.0)`	unaffected	semver	—
`[6.12.83,6.13.0)`	unaffected	semver	—
`[6.18.24,6.19.0)`	unaffected	semver	—
`[6.19.14,6.20.0)`	unaffected	semver	—
`[7.0,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Apply the kernel patch that addresses the array overflow in the Intel uncore PMU discovery code (available in later kernel releases beyond the commit referenced in the advisory).
Configure the system to boot with NUMA enabled or ensure the number of enabled CPUs matches the die size so that no discovery code for offline dies is executed.
If upgrading the kernel is not immediately possible, coordinate with the distribution’s maintainers to backport the fix or disable the Intel uncore PMU module until a patched kernel is available.

Generated by OpenCVE AI on June 1, 2026 at 19:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00122.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/6cfc187d85f18f976d0fe527d4c6f6171542cc19
https://git.kernel.org/stable/c/7a2cb02437d92ed14fe494d8994056d5bd2c72b4
https://git.kernel.org/stable/c/7b568e9eba2fad89a696f22f0413d44cf4a1f892
https://git.kernel.org/stable/c/cfab2c817d2e7e0bee98d66850246ce842ed5f18
https://git.kernel.org/stable/c/d18da11a5e21eac7651c8897e5e0908f6c2bc9de
https://git.kernel.org/stable/c/dfcba8c8674cead6c88a2f269b71aa4efd3d384a
https://git.kernel.org/stable/c/f34feda8e0c9535fee3f8870ce8bab53c2798f71
https://lore.kernel.org/linux-cve-announce/2026050613-CVE-2026-43079-d820@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-43079
https://www.cve.org/CVERecord?id=CVE-2026-43079

History

Mon, 01 Jun 2026 17:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:linux:linux_kernel:7.0:rc1:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc2:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc3:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc4:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc5:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc6:::::: cpe:2.3:o:linux:linux_kernel:7.0:rc7::::::
Metrics	cvssV3_1 `{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

Mon, 01 Jun 2026 17:00:00 +0000

Type	Values Removed	Values Added
References		https://git.kernel.org/stable/c/d18da11a5e21eac7651c8897e5e0908f6c2bc9de https://git.kernel.org/stable/c/dfcba8c8674cead6c88a2f269b71aa4efd3d384a

Thu, 07 May 2026 02:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-119

Thu, 07 May 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-805
References		https://lore.kernel.org/linux-cve-announce/2026050613-CVE-2026-43079-d820@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-43079 https://www.cve.org/CVERecord?id=CVE-2026-43079
Metrics	threat_severity `None`	cvssV3_1 `{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}` threat_severity `Moderate`

Wed, 06 May 2026 14:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-119

Wed, 06 May 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Skip discovery table for offline dies This warning can be triggered if NUMA is disabled and the system boots with fewer CPUs than the number of CPUs in die 0. WARNING: CPU: 9 PID: 7257 at uncore.c:1157 uncore_pci_pmu_register+0x136/0x160 [intel_uncore] Currently, the discovery table continues to be parsed even if all CPUs in the associated die are offline. This can lead to an array overflow at "pmu->boxes[die] = box" in uncore_pci_pmu_register(), which may trigger the warning above or cause other issues.
Title		perf/x86/intel/uncore: Skip discovery table for offline dies
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/6cfc187d85f18f976d0fe527d4c6f6171542cc19 https://git.kernel.org/stable/c/7a2cb02437d92ed14fe494d8994056d5bd2c72b4 https://git.kernel.org/stable/c/7b568e9eba2fad89a696f22f0413d44cf4a1f892 https://git.kernel.org/stable/c/cfab2c817d2e7e0bee98d66850246ce842ed5f18 https://git.kernel.org/stable/c/f34feda8e0c9535fee3f8870ce8bab53c2798f71

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-05-06T07:40:15.767Z

Updated: 2026-06-01T16:14:21.072Z

Reserved: 2026-05-01T14:12:55.983Z

Link: CVE-2026-43079

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2026-05-06T10:16:20.990

Modified: 2026-06-01T17:27:41.790

Link: CVE-2026-43079

Redhat

Severity : Moderate

Publid Date: 2026-05-06T00:00:00Z

Links: CVE-2026-43079 - Bugzilla

OpenCVE Enrichment

Updated: 2026-06-01T19:15:11Z

Weaknesses

CWE-805
Buffer Access with Incorrect Length Value
NVD-CWE-noinfo

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object