CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path
In the Linux kernel, the following vulnerability has been resolved:
mctp: i2c: fix skb memory leak in receive path
When 'midev->allowrx' is false, the newly allocated skb isn't consumed by netifrx(), it needs to free the skb directly.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43457?
CVE-2026-43457 is classified as a moderate severity vulnerability due to the potential for memory leaks in the Linux kernel.
How do I fix CVE-2026-43457?
To fix CVE-2026-43457, update your Linux kernel to the latest patched version that addresses this issue.
What does CVE-2026-43457 affect?
CVE-2026-43457 affects the Linux kernel, specifically related to the mctp and i2c subsystems.
What problems does CVE-2026-43457 cause?
CVE-2026-43457 can lead to memory leaks which may degrade system performance or stability over time.
Is CVE-2026-43457 exploitable?
CVE-2026-43457 is not directly exploitable but can result in resource exhaustion under certain conditions.