Riskcovery

CVE-2026-43457

mctp: i2c: fix skb memory leak in receive path

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mctp: i2c: fix skb memory leak in receive path

When 'midev->allow_rx' is false, the newly allocated skb isn't consumed by netif_rx(), it needs to free the skb directly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f5b8abf9fc3dacd7529d363e26fe8230935d65f8 to before 0fb2adbdd5c03e8c9ebcdc48afd414b2724c85ebAffected
  • f5b8abf9fc3dacd7529d363e26fe8230935d65f8 to before d7900a43b0a314a645ca0a2adf45928dbc7001f4Affected
  • f5b8abf9fc3dacd7529d363e26fe8230935d65f8 to before 9f81be2ab9d8e4744871bfb3e868ef413413829fAffected
  • f5b8abf9fc3dacd7529d363e26fe8230935d65f8 to before 1ec54187e1aa40a4cfa2b265e9a311179f24b98dAffected
  • f5b8abf9fc3dacd7529d363e26fe8230935d65f8 to before 1b1be322342a6b0085bf6ee52235e5ac9834ec25Affected
  • f5b8abf9fc3dacd7529d363e26fe8230935d65f8 to before e3f5e0f22cfc2371e7471c9fd5b4da78f9df7c69Affected
LinuxLinux
  • 5.18Affected
  • before 5.18Not affected
  • 6.1.167 through 6.1.*Not affected
  • 6.6.130 through 6.6.*Not affected
  • 6.12.78 through 6.12.*Not affected
  • 6.18.19 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.