CVE-2026-43317CWE-401

CVE-2026-43317

Medium · published May 8, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

most: core: fix leak on early registration failure

A recent commit fixed a resource leak on early registration failures but

for some reason left out the first error path which still leaks the

resources associated with the interface.

Fix up also the first error path so that the interface is always

released on errors.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-05-08T18:16Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 5.6, < 6.12.756.12.75
linux/linux_kernel≥ 6.13, < 6.18.166.18.16
linux/linux_kernel≥ 6.19, < 6.19.66.19.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (5)
EPSS history
Timeline
  • 08 MAY 13:26Z
    most: core: fix leak on early registration failure
    cvelistv5