CVE-2026-43295

kernel: rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's rapidio subsystem. When memory allocation for idtab fails within the rio_scan_alloc_net() function, the network object is not correctly freed, resulting in a dangling pointer. This improper memory management could lead to system instability or a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-763 · Release of Invalid Pointer or Reference