← Retour à la recherche de CVE

CVE-2026-43373

Linux Kernel

Description

In the Linux kernel, the following vulnerability has been resolved: net: ncsi: fix skb leak in error paths Early return paths in NCSI RX and AEN handlers fail to release the received skb, resulting in a memory leak. Specifically, ncsi_aen_handler() returns on invalid AEN packets without consuming the skb. Similarly, ncsi_rcv_rsp() exits early when failing to resolve the NCSI device, response handler, or request, leaving the skb unfreed.

CVSS 7.5EPSS 0.501%Risque 0.78
Voir la source
Publication
2026-05-08 15:16:48
Versions concernées
unknown
Type
Core software
Vecteur
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Systèmes d’exploitation
Linux