CVE-2026-43202

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: vt8500lcdfb: fix missing dma_free_coherent()

fbi->fb.screen_buffer is allocated with dma_alloc_coherent() but is not freed if the error path is reached.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= e7b995371fe1e29838321fcdc3cfe35bb0d6bfc4, < 9a9bc60ed372aaae9784ff8ad8e5f496ff15fd31; >= e7b995371fe1e29838321fcdc3cfe35bb0d6bfc4, < 9c3873cccb3fab54cde0605ae7093d332c99073e; >= e7b995371fe1e29838321fcdc3cfe35bb0d6bfc4, < 778f31be5b8c10024db23fdd8a05f68a02311008; >= e7b995371fe1e29838321fcdc3cfe35bb0d6bfc4, < e8c5d5f6cd66e032f9aefdcc21b0c34761aef78a; >= e7b995371fe1e29838321fcdc3cfe35bb0d6bfc4, < f47d5b9e8aa6178a0aaf225119ad1ec7d3f49876; >= e7b995371fe1e29838321fcdc3cfe35bb0d6bfc4, < 40c1ff25025150ff6d7ec7ad441fcfd6d070ee76; >= e7b995371fe1e29838321fcdc3cfe35bb0d6bfc4, < 2cd2f988a8bd2da227f5c3cfa0cbf3a9a287ddc3; >= e7b995371fe1e29838321fcdc3cfe35bb0d6bfc4, < 88b3b9924337336a31cefbe99a22ed09401be74a
LinuxLinux3.7

References

Timeline

Published
May 6, 2026
Last modified
Nov 11, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-432037.5In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets during device removal WhCVE-2026-432045.5In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: q6asm: drop DSP responses for closed data streams 'Commit CVE-2026-432057.8In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate num_ifs to prevent out-of-bounds write The drivCVE-2026-432067.8In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() The kfd_evCVE-2026-432077.8In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe function Add mtk_mdp_unregCVE-2026-432089.8In the Linux kernel, the following vulnerability has been resolved: net: do not pass flow_id to set_rps_cpu() Blamed commit made the assumCVE-2026-432095.5In the Linux kernel, the following vulnerability has been resolved: minix: Add required sanity checking to minix_check_superblock() The fsCVE-2026-43219.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Raera - Ankara Web Design and Digital CVE-2026-432105.5In the Linux kernel, the following vulnerability has been resolved: tracing: ring-buffer: Fix to check event length before using Check theCVE-2026-432117.8In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Commit a4e772898f8b ("PCI: CVE-2026-432127.8In the Linux kernel, the following vulnerability has been resolved: LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE The archCVE-2026-432137.5In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: pci: validate sequence number of TX release report Hardwa
CVE-2026-43202: Medium severity, CVSS 5.5 | Vulnix