What’s Vulnerable › Vulnerabilities

CVE-2026-43317: most: core: fix leak on early registration failure

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-08 · updated 2026-10-21
• Weakness: CWE-401

Description

In the Linux kernel, the following vulnerability has been resolved: most: core: fix leak on early registration failure A recent commit fixed a resource leak on early registration failures but for some reason left out the first error path which still leaks the resources associated with the interface. Fix up also the first error path so that the interface is always released on errors.

Affected products

• Linux kernel: from 5.6 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6; 7.0-rc1, 7.0-rc2, 7.0-rc3, 7.0-rc4, 7.0-rc5, 7.0-rc6 (+1) — fixed in 6.12.75, 6.18.16, 6.19.6

How to fix

Upgrade to a fixed version: Linux kernel 6.12.75, 6.18.16, 6.19.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/04474009a2ea7aa27c67d323952a23bb16d5acc5
• https://git.kernel.org/stable/c/2c198c272f9c9213b0fdf6b4a879f445c574f416
• https://git.kernel.org/stable/c/5fd4396c2e48e90cc2597a86c18227d56ea845f0
• https://git.kernel.org/stable/c/bbfe49ffb892bddf32c34bea95b7ff0fc30affb5
• https://git.kernel.org/stable/c/f1ba620f9e8d7291f80c0554e4b820f5fb30e819

Get alerted when CVE-2026-43317 or the next vulnerability affects your stack