CVE-2026-43373

HighCVSS 7.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ncsi: fix skb leak in error paths

Early return paths in NCSI RX and AEN handlers fail to release the received skb, resulting in a memory leak.

Specifically, ncsi_aen_handler() returns on invalid AEN packets without consuming the skb. Similarly, ncsi_rcv_rsp() exits early when failing to resolve the NCSI device, response handler, or request, leaving the skb unfreed.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= 138635cc27c9737f940c3aa80912ff7a61c825af, < 9891d7f4f1ede473c54b49776ae07755083eef06; >= 138635cc27c9737f940c3aa80912ff7a61c825af, < fef5aa6e3bcf3c8053307642663a63b7362d7552; >= 138635cc27c9737f940c3aa80912ff7a61c825af, < 81d6aee32f8f7bbc175c05dbf61f4430bfb88c4a; >= 138635cc27c9737f940c3aa80912ff7a61c825af, < 59962588197863d0d746879f193905c0c6b3df49; >= 138635cc27c9737f940c3aa80912ff7a61c825af, < 553366c271479c0d571dd1bb5d1bcde4747fb82e; >= 138635cc27c9737f940c3aa80912ff7a61c825af, < b70c4e5e711931cdd56e6e905737b72f1e649189; >= 138635cc27c9737f940c3aa80912ff7a61c825af, < 87138dde2d6937b12b967f28fe598a7d59000ae4; >= 138635cc27c9737f940c3aa80912ff7a61c825af, < 5c3398a54266541610c8d0a7082e654e9ff3e259
LinuxLinux4.8

References

Timeline

Published
May 8, 2026
Last modified
Nov 11, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-433747.8In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in remove_nh_grp_entry When reCVE-2026-433755.5In the Linux kernel, the following vulnerability has been resolved: net: mctp: fix device leak on probe failure Driver core holds a refereCVE-2026-433769.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free by using call_rcu() for oplock_info ksmbd cuCVE-2026-433778.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: Don't log keys in SMB3 signing and encryption key generation WhCVE-2026-433787.8In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free in smb2_open() The opinfo pointer obtaCVE-2026-433799.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() opinfCVE-2026-43387.5The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access draftsCVE-2026-433807.1In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read The q54sjCVE-2026-433815.5In the Linux kernel, the following vulnerability has been resolved: nouveau/dpcd: return EBUSY for aux xfer if the device is asleep If we CVE-2026-433825.5In the Linux kernel, the following vulnerability has been resolved: batman-adv: Avoid double-rtnl_lock ELP metric worker batadv_v_elp_get_CVE-2026-433839.4In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-time To prevent timing CVE-2026-433849.8In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-time To prevent timing a
CVE-2026-43373: High severity, CVSS 7.5 | Vulnix