CVE-2026-43295

rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()

State: Published
Severity: Not scored
Published: May 8, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()

When idtab allocation fails, net is not registered with rio_add_net() yet, so kfree(net) is sufficient to release the memory. Set mport->net to NULL to avoid dangling pointer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e6b585ca6e81badeb3d42db3cc408174f2826034 to before 83e579c2f7f6b1706323d744833b26470049dcc2Affected e6b585ca6e81badeb3d42db3cc408174f2826034 to before 34a4f233df5eef5f1f113b2196142c0568b387f8Affected e6b585ca6e81badeb3d42db3cc408174f2826034 to before fecf292c6691970897396190855aa38826b7104eAffected e6b585ca6e81badeb3d42db3cc408174f2826034 to before 649c2e853608cad0b0cba545555d168e67f094b3Affected e6b585ca6e81badeb3d42db3cc408174f2826034 to before 87272e3e70ec4b666885bd520ff77463c11444efAffected e6b585ca6e81badeb3d42db3cc408174f2826034 to before e5a732bfe29451e16abf9c6f07ce5948b22f3d59Affected e6b585ca6e81badeb3d42db3cc408174f2826034 to before 78812c4fb7ed242d5961bf1337a49070d6487c94Affected e6b585ca6e81badeb3d42db3cc408174f2826034 to before 666183dcdd9ad3b8156a1df7f204f728f720380fAffected
LinuxLinux	4.6Affected before 4.6Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

e6b585ca6e81badeb3d42db3cc408174f2826034 to before 83e579c2f7f6b1706323d744833b26470049dcc2Affected
e6b585ca6e81badeb3d42db3cc408174f2826034 to before 34a4f233df5eef5f1f113b2196142c0568b387f8Affected
e6b585ca6e81badeb3d42db3cc408174f2826034 to before fecf292c6691970897396190855aa38826b7104eAffected
e6b585ca6e81badeb3d42db3cc408174f2826034 to before 649c2e853608cad0b0cba545555d168e67f094b3Affected
e6b585ca6e81badeb3d42db3cc408174f2826034 to before 87272e3e70ec4b666885bd520ff77463c11444efAffected
e6b585ca6e81badeb3d42db3cc408174f2826034 to before e5a732bfe29451e16abf9c6f07ce5948b22f3d59Affected
e6b585ca6e81badeb3d42db3cc408174f2826034 to before 78812c4fb7ed242d5961bf1337a49070d6487c94Affected
e6b585ca6e81badeb3d42db3cc408174f2826034 to before 666183dcdd9ad3b8156a1df7f204f728f720380fAffected

LinuxLinux

4.6Affected
before 4.6Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.