CVE-2026-43149

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43149
In the Linux kernel, the following vulnerability has been resolved: net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() The priv->rx_buffer and priv->tx_buffer are alloc'd together as contiguous buffers in uhdlc_init() but freed as two buffers in uhdlc_memclean(). Change the cleanup to only call dma_free_coherent() once on the whole buffer.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/011ae5dd84dc9f05eb9b8e1adff44252ac776e7b Patch
https://git.kernel.org/stable/c/0f85a9655445e67bb0238cfc983d7c383b54938e Patch
https://git.kernel.org/stable/c/36bd7d5deef936c4e1e3cd341598140e5c14c1d3 Patch
https://git.kernel.org/stable/c/6496fb830cbb741d831225cc4e7e5601c6e42970 Patch
https://git.kernel.org/stable/c/84b932bc9899d43e5829e6cf088b72d73a922b2b Patch
https://git.kernel.org/stable/c/ba8d8429e5d6c36f9a654d2b96b9e043c43d92b4 Patch
https://git.kernel.org/stable/c/d68994e37ac3b285692559776e0279a88a3b5f8d Patch
https://git.kernel.org/stable/c/d8a522085d09b30aba1016daf1dddac37c0f0285 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

13 May 2026, 20:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/011ae5dd84dc9f05eb9b8e1adff44252ac776e7b - () https://git.kernel.org/stable/c/011ae5dd84dc9f05eb9b8e1adff44252ac776e7b - Patch
References () https://git.kernel.org/stable/c/0f85a9655445e67bb0238cfc983d7c383b54938e - () https://git.kernel.org/stable/c/0f85a9655445e67bb0238cfc983d7c383b54938e - Patch
References () https://git.kernel.org/stable/c/36bd7d5deef936c4e1e3cd341598140e5c14c1d3 - () https://git.kernel.org/stable/c/36bd7d5deef936c4e1e3cd341598140e5c14c1d3 - Patch
References () https://git.kernel.org/stable/c/6496fb830cbb741d831225cc4e7e5601c6e42970 - () https://git.kernel.org/stable/c/6496fb830cbb741d831225cc4e7e5601c6e42970 - Patch
References () https://git.kernel.org/stable/c/84b932bc9899d43e5829e6cf088b72d73a922b2b - () https://git.kernel.org/stable/c/84b932bc9899d43e5829e6cf088b72d73a922b2b - Patch
References () https://git.kernel.org/stable/c/ba8d8429e5d6c36f9a654d2b96b9e043c43d92b4 - () https://git.kernel.org/stable/c/ba8d8429e5d6c36f9a654d2b96b9e043c43d92b4 - Patch
References () https://git.kernel.org/stable/c/d68994e37ac3b285692559776e0279a88a3b5f8d - () https://git.kernel.org/stable/c/d68994e37ac3b285692559776e0279a88a3b5f8d - Patch
References () https://git.kernel.org/stable/c/d8a522085d09b30aba1016daf1dddac37c0f0285 - () https://git.kernel.org/stable/c/d8a522085d09b30aba1016daf1dddac37c0f0285 - Patch
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

06 May 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 12:16

Updated : 2026-05-13 20:15

NVD link : CVE-2026-43149

Mitre link : CVE-2026-43149

CVE.ORG link : CVE-2026-43149

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo