CVE-2026-43457

kernel: mctp: i2c: fix skb memory leak in receive path

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Management Component Transport Protocol (MCTP) over I2C receive path. When the midev->allow_rx flag is false, a newly allocated network buffer (skb) is not properly freed. This memory leak can lead to a gradual exhaustion of system memory, potentially allowing a local attacker to cause a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime