What’s Vulnerable › Vulnerabilities
CVE-2026-43143: mfd: core: Add locking around 'mfd_of_node_list'
- Severity: medium (CVSS 5.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-05-06 · updated 2026-06-17
Description
In the Linux kernel, the following vulnerability has been resolved: mfd: core: Add locking around 'mfd_of_node_list' Manipulating a list in the kernel isn't safe without some sort of mutual exclusion. Add a mutex any time we access / modify 'mfd_of_node_list' to prevent possible crashes.
Affected products
- Linux kernel: from 5.9 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6 — fixed in 6.1.165, 6.12.75, 6.18.16, 6.19.6, 6.6.128
How to fix
Upgrade to a fixed version: Linux kernel 6.1.165, 6.12.75, 6.18.16, 6.19.6. Check the vendor advisory for mitigations.
References
- https://git.kernel.org/stable/c/20117c92bcf9c11afd64d7481d8f94fdf410726e
- https://git.kernel.org/stable/c/45341856ecda1d56689451abd5cf1d1aa57dbe47
- https://git.kernel.org/stable/c/9b02e3fec3a7fcb990b4d3bd3b13d7edf123dca6
- https://git.kernel.org/stable/c/db131ef9d8980cf60dcac8cf94c036eccf75e5d0
- https://git.kernel.org/stable/c/dcfa679bba02412f2087be21cf06ae88b1f4e0ef
- https://git.kernel.org/stable/c/e2e7c275f557e2b75e3128f4818063798248774c
Get alerted when CVE-2026-43143 or the next vulnerability affects your stack