PT-2026-37565 · Linux · Linux Kernel

Published 2026-05-06 · Updated 2026-05-09 · CVE-2026-43225

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the rtl8723bs staging driver. The function cfg80211 inform bss frame() may return NULL upon failure, which prevents the allocated buffer buf from being freed before the function returns early.

Recommendations Ensure that the buf buffer is freed on both success and failure paths within the cfg80211 inform bss frame() function.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-43225

Affected Products

Linux Kernel

References · 17

• https://ubuntu.com/security/CVE-2026-43225 · Vendor Advisory
• https://git.kernel.org/stable/c/017295b17bf1f477246c95bd253a7ef0cb4684c9 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43225 · Vendor Advisory
• https://git.kernel.org/stable/c/abe850d82c8cb72d28700673678724e779b1826e · Patch
• https://git.kernel.org/stable/c/a968c6a39607c129b8ac2c3c2a5e8923574e90d0 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43225 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43225 · Vendor Advisory
• https://git.kernel.org/stable/c/9f70f78e22b321429afc77befecedf05543d4e2c · Patch
• https://git.kernel.org/stable/c/8311bb40698ba027649d5d1ca84ad4bf25270546 · Patch
• https://git.kernel.org/stable/c/af48c1a0abe849e167fc754b6c260b6d8350b6fd · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43225 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43225 · Security Note
• https://git.kernel.org/stable/c/9874e33ce52ba449ab0ade78752a2d37a2294617 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43225 · Security Note
• https://git.kernel.org/linus/abe850d82c8cb72d28700673678724e779b1826e · Note