PT-2026-39127 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-26 · CVE-2026-43466

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the net/mlx5e component where a DMA FIFO desynchronization occurs during error CQE SQ recovery. When a TX error CQE triggers a recovery flow, the function mlx5e reset txqsq cc pc() resets the dma fifo cc variable to 0 but fails to reset dma fifo pc. This causes the DMA FIFO producer and consumer to become desynchronized. Consequently, the producer pushes new DMA entries at the old dma fifo pc position while the consumer reads from position 0, leading to the unmapping of stale DMA addresses from before the recovery.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43466

Affected Products

Linux Kernel

References · 21

• https://ubuntu.com/security/CVE-2026-43466 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-43466 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-43466 · Security Note
• https://git.kernel.org/stable/c/9c5ee9b981ee050b73fdf3f4a2464d6f1a8e10a8 · Patch
• https://git.kernel.org/stable/c/829efcccfa8f69db5dc8332961295587d218cee6 · Patch
• https://git.kernel.org/stable/c/383b37c04a4827ba60b2bafc1a6cdfd995aed58f · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-43466 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-43466 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-43466 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43466 · Security Note
• https://git.kernel.org/stable/c/821f85d619f7f22cda7b9d7de89cf5eeb1d11544 · Patch
• https://git.kernel.org/stable/c/ce1b19dd0684eeb68a124c11085bd611260b36d9 · Patch
• https://git.kernel.org/stable/c/6eb68ecc5acc3b319986566c595990b8a7265b23 · Patch
• https://git.kernel.org/stable/c/1633111d69053512d099658d4a05fc736fab36b0 · Patch
• https://git.kernel.org/stable/c/6f41f7812bfa7f991b732a4b45c5c52fc4be3b4e · Patch