PT-2026-43970 · Linux · Linux

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-46102

Mitre

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

In the Linux kernel, the following vulnerability has been resolved:

net: strparser: fix skb head leak in strp abort strp()

When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb head.

That skb is not released in strp abort strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory.

Fix this by freeing strp->skb head and resetting the parser state in the abort path. Leave strp stop() unchanged so final cleanup still happens in strp done() after the work and timer have been synchronized.

Fix

Related Identifiers

CVE-2026-46102

Affected Products

Linux

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46102 · Security Note
• https://git.kernel.org/stable/c/e9ae00490d474757c0f9c65073de83e6bb1e5a00 · Note
• https://git.kernel.org/stable/c/19ca9475f18f991735f98a22e735c43e95e6298d · Note
• https://git.kernel.org/stable/c/56082f442023db9be1a5a29d4ee361de4017c0b7 · Note
• https://git.kernel.org/stable/c/fe72340daaf1af588be88056faf98965f39e6032 · Note
• https://git.kernel.org/stable/c/5327dad2ffe9c1b49881dd6d51ff3c6893847568 · Note