CVE-2026-43419

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() Add __putname() calls to error code paths that did not free the "path" pointer obtained by __getname(). If ownership of this pointer is not passed to the caller via path_info.path, the function must free it before returning.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

History

22 May 2026, 19:38

Type Values Removed Values Added
CWE CWE-401
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/040d159a45ded7f33201421a81df0aa2a86e5a0b - () https://git.kernel.org/stable/c/040d159a45ded7f33201421a81df0aa2a86e5a0b - Patch
References () https://git.kernel.org/stable/c/097cd68f46686391a98f2618188f0cb7b7570de2 - () https://git.kernel.org/stable/c/097cd68f46686391a98f2618188f0cb7b7570de2 - Patch
References () https://git.kernel.org/stable/c/13b8b9d6f59ef17fb96c298c3a0d62a8306950cc - () https://git.kernel.org/stable/c/13b8b9d6f59ef17fb96c298c3a0d62a8306950cc - Patch
References () https://git.kernel.org/stable/c/5895d0164c84d7fec6abc198920c257f55c51899 - () https://git.kernel.org/stable/c/5895d0164c84d7fec6abc198920c257f55c51899 - Patch
References () https://git.kernel.org/stable/c/657dc653b06a3cc0282aea447a3f137fa94066a4 - () https://git.kernel.org/stable/c/657dc653b06a3cc0282aea447a3f137fa94066a4 - Patch
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

08 May 2026, 15:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-05-08 15:16

Updated : 2026-05-22 19:38


NVD link : CVE-2026-43419

Mitre link : CVE-2026-43419

CVE.ORG link : CVE-2026-43419


JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime