PT-2026-39106 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-21 · CVE-2026-43445

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the e1000 and e1000e drivers during DMA (Direct Memory Access) error cleanup. When an error occurs while mapping TX buffers, the driver fails to correctly unmap all buffers already mapped for the socket buffer (skb). This is caused by an off-by-one error where the count is decremented before the cleanup loop, resulting in exactly one DMA mapping leaking if at least one mapping was successful prior to the error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-43445

Affected Products

Linux Kernel

References · 20

• https://git.kernel.org/stable/c/7eaeb778bfaa3b2a804f89321c234d59c74569db · Patch
• https://git.kernel.org/stable/c/fa5ba9867a55e640df0dc79bf0199770fb043f03 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43445 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43445 · Vendor Advisory
• https://git.kernel.org/stable/c/0a1fc25deabab4efce64610e3c449485c4fa8f5f · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-43445 · Vendor Advisory
• https://git.kernel.org/stable/c/0606c24a745bafd1be5d66c48361638cd9cad74b · Patch
• https://git.kernel.org/stable/c/e94eaef11142b01f77bf8ba4d0b59720b7858109 · Patch
• https://git.kernel.org/stable/c/30e87ade8d678c25a8546cf38c0b498fa5cb27d3 · Patch
• https://cve.org/CVERecord?id=CVE-2026-43445 · Security Note
• https://git.kernel.org/stable/c/519051c711dfd239ef6e4b28878efee400a035f9 · Patch
• https://git.kernel.org/stable/c/10b5e65959e955a1c8894e0a5413944b5a70204a · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-43445 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43445 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43445 · Vendor Advisory