PT-2026-37468 · Linux+1 · Linux Kernel+1

Published 2026-05-06 · Updated 2026-05-07 · CVE-2026-43128

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the RDMA umem component where a failure in the ib umem dmabuf map pages() function within ib umem dmabuf get pinned with dma device() leads to a double dma buf unpin operation. When the mapping fails, the dmabuf is unpinned immediately, but the umem dmabuf->pinned flag remains set. Subsequently, when ib umem release() is called, it triggers ib umem dmabuf revoke(), which attempts to call dma buf unpin() a second time.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2026-43128

RHSA-2026:19568

RHSA-2026:19569

Affected Products

Linux Kernel

Rocky Linux

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2026-43128 · Security Note
• https://git.kernel.org/stable/c/40126bcbefa79ea86672e05dae608596bab38319 · Patch
• https://errata.rockylinux.org/RLSA-2026:19568 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43128 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43128 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43128 · Vendor Advisory
• https://git.kernel.org/stable/c/d3e32e2f3262f1b25d77c085ace38e2cc4ad75cf · Patch
• https://git.kernel.org/stable/c/b324327ff6f48d8065dca67eb3b91357e72726bd · Patch
• https://git.kernel.org/stable/c/ba3bf0f1bf1d5d0404678485e872980532fcc2c4 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43128 · Vendor Advisory
• https://git.kernel.org/stable/c/104016eb671e19709721c1b0048dd912dc2e96be · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43128 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43128 · Security Note
• https://git.kernel.org/stable/c/70542b69abff34d24b11ae0bb200cc7a766d18df · Patch
• https://git.kernel.org/linus/104016eb671e19709721c1b0048dd912dc2e96be · Note