exploitDog

CVE-2026-43457

Опубликовано: 08 мая 2026

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

mctp: i2c: fix skb memory leak in receive path

When 'midev->allow_rx' is false, the newly allocated skb isn't consumed by netif_rx(), it needs to free the skb directly.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.18 (включая) до 6.1.167 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.130 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.78 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.19 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19 (включая) до 6.19.9 (исключая)

cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

EPSS

Процентиль: 2%

0.00114

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVE-2026-43457

CVSS3: 5.5

ubuntu

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: mctp: i2c: fix skb memory leak in receive path When 'midev->allow_rx' is false, the newly allocated skb isn't consumed by netif_rx(), it needs to free the skb directly.

CVE-2026-43457

redhat

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: mctp: i2c: fix skb memory leak in receive path When 'midev->allow_rx' is false, the newly allocated skb isn't consumed by netif_rx(), it needs to free the skb directly.

CVE-2026-43457

CVSS3: 5.5

debian

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: m ...

GHSA-2mxh-qrpv-mfvx

CVSS3: 5.5

github

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: mctp: i2c: fix skb memory leak in receive path When 'midev->allow_rx' is false, the newly allocated skb isn't consumed by netif_rx(), it needs to free the skb directly.

openSUSE-SU-2026:21388-1

suse-cvrf

14 дней назад

Security update for the Linux Kernel

EPSS

Процентиль: 2%

0.00114

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-401