Riskcovery

CVE-2026-43224

io_uring/zcrx: fix sgtable leak on mapping failures

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring/zcrx: fix sgtable leak on mapping failures

In an unlikely case when io_populate_area_dma() fails, which could only happen on a PAGE_POOL_32BIT_ARCH_WITH_64BIT_DMA machine, io_zcrx_map_area() will have an initialised and not freed table. It was supposed to be cleaned up in the error path, but !is_mapped prevents that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 439a98b972fbb1991819b5367f482cd4161ba39c to before f1ae403324311e143ef20e53cf9a5f01e312f7c9Affected
  • 439a98b972fbb1991819b5367f482cd4161ba39c to before ef075c1464ac9047e2cf7d23cb020bfd0b8e4b60Affected
  • 439a98b972fbb1991819b5367f482cd4161ba39c to before a983aae397767e9da931128ff2b5bf9066513ce3Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.