CVE-2026-43197

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0

Description An issue exists in the netconsole component where messages passed from the console subsystem are not guaranteed to be nul-terminated. This can lead to out-of-bounds (OOB) reads when the system processes these messages. The issue was identified through KASAN (Kernel Address Sanitizer), a dynamic memory error detector, which detected slab-out-of-bounds reads during the execution of the netconsole write() function. The vulnerability is triggered when the msg variable is processed by functions such as scnprintf() and vsnprintf() without proper termination.

Recommendations Update the Linux kernel to version 6.19.0 or later.