CVE-2026-43157

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and tx_fc_pfvf_bmap) are allocated by cgx_lmac_init() but never freed in cgx_lmac_exit(). Unbinding and rebinding the driver therefore triggers kmemleak: unreferenced object (size 16): backtrace: rvu_alloc_bitmap cgx_probe Free both bitmaps during teardown.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

History

13 May 2026, 21:09

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE CWE-401
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/013ac469596a0b8671e62d89c89ae0bd46bbe667 - () https://git.kernel.org/stable/c/013ac469596a0b8671e62d89c89ae0bd46bbe667 - Patch
References () https://git.kernel.org/stable/c/3def995c4ede842adf509c410e92d09a0cedc965 - () https://git.kernel.org/stable/c/3def995c4ede842adf509c410e92d09a0cedc965 - Patch
References () https://git.kernel.org/stable/c/6d389382ee655128056fbdab86baad8495ffbf33 - () https://git.kernel.org/stable/c/6d389382ee655128056fbdab86baad8495ffbf33 - Patch
References () https://git.kernel.org/stable/c/ad8a13a45c5c24d0d32de9a1c3fd58498a675ece - () https://git.kernel.org/stable/c/ad8a13a45c5c24d0d32de9a1c3fd58498a675ece - Patch
References () https://git.kernel.org/stable/c/ccca14bbdcc25829d355b9f4d3249f43dadb71c1 - () https://git.kernel.org/stable/c/ccca14bbdcc25829d355b9f4d3249f43dadb71c1 - Patch
References () https://git.kernel.org/stable/c/ccef79af58b43787c25710c9da96651c6ddfe50f - () https://git.kernel.org/stable/c/ccef79af58b43787c25710c9da96651c6ddfe50f - Patch

06 May 2026, 12:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-05-06 12:16

Updated : 2026-05-13 21:09


NVD link : CVE-2026-43157

Mitre link : CVE-2026-43157

CVE.ORG link : CVE-2026-43157


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime