CVE-2026-43014

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: macb: properly unregister fixed rate clocks

The additional resources allocated with clk_register_fixed_rate() need to be released with clk_unregister_fixed_rate(), otherwise they are lost.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 83a77e9ec4150ee4acc635638f7dedd9da523a26, < 54c6f0e7682433abed0304ac2f5cb71a92d4b366; >= 83a77e9ec4150ee4acc635638f7dedd9da523a26, < 015aa24d3721a05b40935b8af78b49cadf616b8d; >= 83a77e9ec4150ee4acc635638f7dedd9da523a26, < ec1be2ce0d94506f11b22066fd6dc5eb4341b14f; >= 83a77e9ec4150ee4acc635638f7dedd9da523a26, < e1f6f47d6e60d51c3294e5b85787e9aee24c450e; >= 83a77e9ec4150ee4acc635638f7dedd9da523a26, < e35dbfdb1b7710f04ff5c9972ea04971d823a22d; >= 83a77e9ec4150ee4acc635638f7dedd9da523a26, < 5392a5174df4f5a2fad2f00e8c617394d0efe031; >= 83a77e9ec4150ee4acc635638f7dedd9da523a26, < 6ec567425c057fd850651ee09b31d059ef960e0f; >= 83a77e9ec4150ee4acc635638f7dedd9da523a26, < f0f367a4f459cc8118aadc43c6bba53c60d93f8d
LinuxLinux4.10

References

Timeline

Published
May 1, 2026
Last modified
Nov 11, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-430157.8In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_deviceCVE-2026-430167.8In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_dCVE-2026-430175.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate mesh send advertising payload length mesh_seCVE-2026-430188.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_reqCVE-2026-430197.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync hci_connCVE-2026-43027.2The WowOptin: Next-Gen Popup Maker plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1CVE-2026-430207.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load Load Long Term Keys stoCVE-2026-430215.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails WhenCVE-2026-430225.5In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if existsCVE-2026-430237.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_connect() sco_sock_conCVE-2026-430245.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE verdict nft_queue is aCVE-2026-430257.3In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new expectations Use t
CVE-2026-43014: Medium severity, CVSS 5.5 | Vulnix