CVE-2026-43295

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43295
In the Linux kernel, the following vulnerability has been resolved: rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() When idtab allocation fails, net is not registered with rio_add_net() yet, so kfree(net) is sufficient to release the memory. Set mport->net to NULL to avoid dangling pointer.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/34a4f233df5eef5f1f113b2196142c0568b387f8 Patch
https://git.kernel.org/stable/c/649c2e853608cad0b0cba545555d168e67f094b3 Patch
https://git.kernel.org/stable/c/666183dcdd9ad3b8156a1df7f204f728f720380f Patch
https://git.kernel.org/stable/c/78812c4fb7ed242d5961bf1337a49070d6487c94 Patch
https://git.kernel.org/stable/c/83e579c2f7f6b1706323d744833b26470049dcc2 Patch
https://git.kernel.org/stable/c/87272e3e70ec4b666885bd520ff77463c11444ef Patch
https://git.kernel.org/stable/c/e5a732bfe29451e16abf9c6f07ce5948b22f3d59 Patch
https://git.kernel.org/stable/c/fecf292c6691970897396190855aa38826b7104e Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

14 May 2026, 19:44

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/34a4f233df5eef5f1f113b2196142c0568b387f8 - () https://git.kernel.org/stable/c/34a4f233df5eef5f1f113b2196142c0568b387f8 - Patch
References () https://git.kernel.org/stable/c/649c2e853608cad0b0cba545555d168e67f094b3 - () https://git.kernel.org/stable/c/649c2e853608cad0b0cba545555d168e67f094b3 - Patch
References () https://git.kernel.org/stable/c/666183dcdd9ad3b8156a1df7f204f728f720380f - () https://git.kernel.org/stable/c/666183dcdd9ad3b8156a1df7f204f728f720380f - Patch
References () https://git.kernel.org/stable/c/78812c4fb7ed242d5961bf1337a49070d6487c94 - () https://git.kernel.org/stable/c/78812c4fb7ed242d5961bf1337a49070d6487c94 - Patch
References () https://git.kernel.org/stable/c/83e579c2f7f6b1706323d744833b26470049dcc2 - () https://git.kernel.org/stable/c/83e579c2f7f6b1706323d744833b26470049dcc2 - Patch
References () https://git.kernel.org/stable/c/87272e3e70ec4b666885bd520ff77463c11444ef - () https://git.kernel.org/stable/c/87272e3e70ec4b666885bd520ff77463c11444ef - Patch
References () https://git.kernel.org/stable/c/e5a732bfe29451e16abf9c6f07ce5948b22f3d59 - () https://git.kernel.org/stable/c/e5a732bfe29451e16abf9c6f07ce5948b22f3d59 - Patch
References () https://git.kernel.org/stable/c/fecf292c6691970897396190855aa38826b7104e - () https://git.kernel.org/stable/c/fecf292c6691970897396190855aa38826b7104e - Patch
First Time Linux linux Kernel
Linux

08 May 2026, 14:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-08 14:16

Updated : 2026-05-14 19:44

NVD link : CVE-2026-43295

Mitre link : CVE-2026-43295

CVE.ORG link : CVE-2026-43295

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo