Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-43373

net: ncsi: fix skb leak in error paths

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: ncsi: fix skb leak in error paths Early return paths in NCSI RX and AEN handlers fail to release the received skb, resulting in a memory leak. Specifically, ncsi_aen_handler() returns on invalid AEN packets without consuming the skb. Similarly, ncsi_rcv_rsp() exits early when failing to resolve the NCSI device, response handler, or request, leaving the skb unfreed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 138635cc27c9737f940c3aa80912ff7a61c825af to < 9891d7f4f1ede473c54b49776ae07755083eef06affected
  • 138635cc27c9737f940c3aa80912ff7a61c825af to < fef5aa6e3bcf3c8053307642663a63b7362d7552affected
  • 138635cc27c9737f940c3aa80912ff7a61c825af to < 81d6aee32f8f7bbc175c05dbf61f4430bfb88c4aaffected
  • 138635cc27c9737f940c3aa80912ff7a61c825af to < 59962588197863d0d746879f193905c0c6b3df49affected
  • 138635cc27c9737f940c3aa80912ff7a61c825af to < 553366c271479c0d571dd1bb5d1bcde4747fb82eaffected
  • 138635cc27c9737f940c3aa80912ff7a61c825af to < b70c4e5e711931cdd56e6e905737b72f1e649189affected
  • 138635cc27c9737f940c3aa80912ff7a61c825af to < 87138dde2d6937b12b967f28fe598a7d59000ae4affected
  • 138635cc27c9737f940c3aa80912ff7a61c825af to < 5c3398a54266541610c8d0a7082e654e9ff3e259affected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 5.10.253 to ≤ 5.10.*unaffected
  • 5.15.203 to ≤ 5.15.*unaffected
  • 6.1.167 to ≤ 6.1.*unaffected
  • 6.6.130 to ≤ 6.6.*unaffected
  • 6.12.78 to ≤ 6.12.*unaffected
  • 6.18.19 to ≤ 6.18.*unaffected
  • 6.19.9 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References