PT-2026-37400 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-19 · CVE-2026-43090

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the Linux kernel due to a reference count imbalance. The issue occurs within the xfrm migrate policy find() function, which performs a double call to the xfrm pol hold rcu() function. Because the lookup function already returns a policy with a held reference, the second call is redundant, leading to a leak in xfrm policy alloc().

Recommendations Remove the redundant xfrm pol hold rcu() call within the xfrm migrate policy find() function.

Exploit

Fix

Related Identifiers

CVE-2026-43090

Affected Products

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43090.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-43090 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-43090 · Vendor Advisory
• https://git.kernel.org/stable/c/70c2a89a3bc207c3bfbf6f21bb439809e0a4a27a · Patch
• https://linux.oracle.com/errata/ELSA-2026-50372.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43090 · Security Note
• https://git.kernel.org/stable/c/836ee1b0426ea3db31531e9581cc32f513d24e32 · Patch
• https://git.kernel.org/stable/c/83317cce60a032c49480dcdabe146435bd689d03 · Patch
• https://git.kernel.org/stable/c/21e235a36cfb6d145cefb10728f12f5dc5412f54 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43090 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43090 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43090 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43090 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note