PT-2026-37489 · Linux+1 · Linux Kernel+1

CVE-2026-43149 · Published 2026-05-06 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the net: wan/fsl ucc hdlc component where priv->rx buffer and priv->tx buffer are allocated together as contiguous buffers in the uhdlc init() function but are incorrectly freed as two separate buffers in the uhdlc memclean() function. This requires the cleanup process to call dma free coherent() only once for the entire buffer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-43149

SUSE-SU-2026:3130-1

USN-8492-1

USN-8492-2

USN-8492-3

USN-8492-4

USN-8492-5

USN-8497-1

USN-8498-1

USN-8499-1

USN-8575-1

USN-8576-1

Affected Products

Linuxmint

Linux Kernel

References · 2204

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43149.json · Exploit
• https://ubuntu.com/security/CVE-2026-53082 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23365 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8492-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31747 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23090 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52998 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43300 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43168 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43503 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23318 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52957 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23180 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23454 · Vendor Advisory