Skip to main content
VulnerabilityPublished Updated

CVE-2026-43163: Linux kernel · md/bitmap: fix GPF in write_page caused by resize race

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in ebcacc7ca22d5e8a03a970f0621ae1d1356b9ae8 : update Linux kernel when convenient.

Data as of 6 Nov 2026, 16:02 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
CISA SSVC
Exploitation
No evidence of active exploitation and no public proof of concept
Automatable
Attackers cannot reliably automate steps 1–4 of the kill chain
Technical impact
Limited control over the software or limited information exposure

CISA SSVC assessment, 2026-11-06.

Patch
Available – fixed in ebcacc7ca22d5e8a03a970f0621ae1d1356b9ae8, d92b8fac294b5f915c50e65ce4ae2262e53614ec, d3af62411e19752c663fe4f424dbf49d95a4cc7c +5

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 6 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ d60b479d177a5735b6b4db6ee5280ef6653f50e7, < ebcacc7ca22d5e8a03a970f0621ae1d1356b9ae8
Fixed in
  • ebcacc7ca22d5e8a03a970f0621ae1d1356b9ae8
LinuxLinuxAffected
  • ≥ d60b479d177a5735b6b4db6ee5280ef6653f50e7, < d92b8fac294b5f915c50e65ce4ae2262e53614ec
Fixed in
  • d92b8fac294b5f915c50e65ce4ae2262e53614ec
LinuxLinuxAffected
  • ≥ d60b479d177a5735b6b4db6ee5280ef6653f50e7, < d3af62411e19752c663fe4f424dbf49d95a4cc7c
Fixed in
  • d3af62411e19752c663fe4f424dbf49d95a4cc7c
LinuxLinuxAffected
  • ≥ d60b479d177a5735b6b4db6ee5280ef6653f50e7, < a437e3bf30e32846079e470c1ba5ee790bccdf89
Fixed in
  • a437e3bf30e32846079e470c1ba5ee790bccdf89
LinuxLinuxAffected
  • ≥ d60b479d177a5735b6b4db6ee5280ef6653f50e7, < 140cc839fbeb1ddb33a8da8811b716d88d3905b7
Fixed in
  • 140cc839fbeb1ddb33a8da8811b716d88d3905b7
LinuxLinuxAffected
  • ≥ d60b479d177a5735b6b4db6ee5280ef6653f50e7, < 46ef85f854dfa9d5226b3c1c46493d79556c9589
Fixed in
  • 46ef85f854dfa9d5226b3c1c46493d79556c9589

AI-suggested

A fix is available in the Linux kernel as indicated by multiple fixed commit versions. Users should update to a Linux kernel version that includes the patches identified by the fixed commit hashes to remediate this issue.

Description

CVE-2026-43163 is a use-after-free race condition vulnerability in the Linux kernel's md/bitmap subsystem. It causes a General Protection Fault (GPF) in the write_page() function during array resizing. The issue arises from concurrent access to freed memory due to lack of proper locking between bitmap_daemon_work() and __bitmap_resize(). The fix involves holding a mutex during bitmap updates to prevent this race.

References

Community reviews

Loading reviews…