CVE-2026-43157
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and tx_fc_pfvf_bmap) are allocated by cgx_lmac_init() but never freed in cgx_lmac_exit(). Unbinding and rebinding the driver therefore triggers kmemleak: unreferenced object (size 16): backtrace: rvu_alloc_bitmap cgx_probe Free both bitmaps during teardown.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedMay 6, 2026
First seenMay 6, 2026
Weakness typeCWE-401CWE-401
How to fix
Update
- linux linux_kernel6.1.165, 6.6.128, 6.12.75, 6.18.16, 6.19.6 or later
Patches
- git.kernel.org/stable/c/013ac469596a0b8671e62d89c89ae0bd46bbe667
- git.kernel.org/stable/c/3def995c4ede842adf509c410e92d09a0cedc965
- git.kernel.org/stable/c/6d389382ee655128056fbdab86baad8495ffbf33
- git.kernel.org/stable/c/ad8a13a45c5c24d0d32de9a1c3fd58498a675ece
- git.kernel.org/stable/c/ccca14bbdcc25829d355b9f4d3249f43dadb71c1
- git.kernel.org/stable/c/ccef79af58b43787c25710c9da96651c6ddfe50f
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.18 ≤ v < 6.1.165, 6.2 ≤ v < 6.6.128, 6.7 ≤ v < 6.12.75, 6.13 ≤ v < 6.18.16, 6.19 ≤ v < 6.19.6 | 6.1.165, 6.6.128, 6.12.75, 6.18.16, 6.19.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.