CVE-2026-43473: scsi: mpi3mr: Add NULL checks when resetting request and reply queues
In the Linux kernel, the following vulnerability has been resolved:
scsi: mpi3mr: Add NULL checks when resetting request and reply queues
The driver encountered a crash during resource cleanup when the reply and request queues were NULL due to freed memory. This issue occurred when the creation of reply or request queues failed, and the driver freed the memory first, but attempted to mem set the content of the freed memory, leading to a system crash.
Add NULL pointer checks for reply and request queues before accessing the reply/request memory during cleanup
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43473?
CVE-2026-43473 has been rated as a medium severity vulnerability.
How do I fix CVE-2026-43473?
To resolve CVE-2026-43473, update the Linux kernel to the latest version that includes the patch for the mpi3mr driver.
What products are affected by CVE-2026-43473?
CVE-2026-43473 affects the Linux kernel specifically in the mpi3mr driver.
What is the impact of CVE-2026-43473?
The impact of CVE-2026-43473 includes potential crashes during resource cleanup in the affected driver.
When was CVE-2026-43473 reported?
CVE-2026-43473 was reported and resolved in 2026.