CVE-2026-43372

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: microchip: Fix error path in PTP IRQ setup

If request_threaded_irq() fails during the PTP message IRQ setup, the newly created IRQ mapping is never disposed. Indeed, the ksz_ptp_irq_setup()'s error path only frees the mappings that were successfully set up.

Dispose the newly created mapping if the associated request_threaded_irq() fails at setup.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 3b5a6115d6ea45df1ea65dc9b832b23db5d593ba, < 3704ac6a0d9a78f66a187515a8ca3faedaf01cc5; >= 1ba6da6ca3db76f6a39004fd33a9c990e428515e, < e80fef36c676c947072dabeb5803ae59d92ba493; >= d0b8fec8ae50525b57139393d0bb1f446e82ff7e, < 6c58a9fdb0d0e1011aa02455d26d6ebea251979b; >= d0b8fec8ae50525b57139393d0bb1f446e82ff7e, < c2d1d41e0e8ec447d40a5752844fc5fb0b23db27; >= d0b8fec8ae50525b57139393d0bb1f446e82ff7e, < 99c8c16a4aad0b37293cae213e15957c573cf79b; ae12e4e0ca231475bcef841c6a6722fa185fd520; >= 6.6.119, < 6.6.130; >= 6.12.61, < 6.12.78; >= 6.17.11, < 6.18
LinuxLinux6.18

References

Timeline

Published
May 8, 2026
Last modified
Nov 11, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-433737.5In the Linux kernel, the following vulnerability has been resolved: net: ncsi: fix skb leak in error paths Early return paths in NCSI RX aCVE-2026-433747.8In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry When reCVE-2026-433755.5In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a refereCVE-2026-433769.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free by using call_rcu() for oplock_info ksmbd cuCVE-2026-433778.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: Don't log keys in SMB3 signing and encryption key generation WhCVE-2026-433787.8In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free in smb2_open() The opinfo pointer obtaCVE-2026-433799.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() opinfCVE-2026-43387.5The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access draftsCVE-2026-433807.1In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read The q54sjCVE-2026-433815.5In the Linux kernel, the following vulnerability has been resolved: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep If we CVE-2026-433825.5In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnl_lock ELP metric worker batadv_v_elp_get_CVE-2026-433839.4In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing
CVE-2026-43372: Medium severity, CVSS 5.5 | Vulnix