---
id: CVE-2026-43157
title: 'octeontx2-af: CGX: fix bitmap leaks'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  octeontx2-af: CGX: fix bitmap leaks

  The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and tx_fc_pfvf_bmap)
  are allocated by cgx_lmac_init() but never freed in cgx_lmac_e…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= e740003874edc13e468d19233f99787bedb4bb8e <
    ad8a13a45c5c24d0d32de9a1c3fd58498a675ece
  - >-
    Linux >= e740003874edc13e468d19233f99787bedb4bb8e <
    013ac469596a0b8671e62d89c89ae0bd46bbe667
  - >-
    Linux >= e740003874edc13e468d19233f99787bedb4bb8e <
    ccef79af58b43787c25710c9da96651c6ddfe50f
  - >-
    Linux >= e740003874edc13e468d19233f99787bedb4bb8e <
    6d389382ee655128056fbdab86baad8495ffbf33
  - >-
    Linux >= e740003874edc13e468d19233f99787bedb4bb8e <
    ccca14bbdcc25829d355b9f4d3249f43dadb71c1
  - >-
    Linux >= e740003874edc13e468d19233f99787bedb4bb8e <
    3def995c4ede842adf509c410e92d09a0cedc965
  - Linux 5.18
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:29:55.478487Z'
published: '2026-05-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:32:34.398Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43157'
references:
  - url: 'https://git.kernel.org/stable/c/ad8a13a45c5c24d0d32de9a1c3fd58498a675ece'
  - url: 'https://git.kernel.org/stable/c/013ac469596a0b8671e62d89c89ae0bd46bbe667'
  - url: 'https://git.kernel.org/stable/c/ccef79af58b43787c25710c9da96651c6ddfe50f'
  - url: 'https://git.kernel.org/stable/c/6d389382ee655128056fbdab86baad8495ffbf33'
  - url: 'https://git.kernel.org/stable/c/ccca14bbdcc25829d355b9f4d3249f43dadb71c1'
  - url: 'https://git.kernel.org/stable/c/3def995c4ede842adf509c410e92d09a0cedc965'
tags:
  - cve.org
epss: 0.00128
epssPercentile: 0.0247
ingestedAt: '2026-11-06T15:54:04.020Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: CGX: fix bitmap leaks

The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and tx_fc_pfvf_bmap)
are allocated by cgx_lmac_init() but never freed in cgx_lmac_exit().
Unbinding and rebinding the driver therefore triggers kmemleak:

    unreferenced object (size 16):
        backtrace:
          rvu_alloc_bitmap
          cgx_probe

Free both bitmaps during teardown.

## Affected

- `Linux >= e740003874edc13e468d19233f99787bedb4bb8e < ad8a13a45c5c24d0d32de9a1c3fd58498a675ece`
- `Linux >= e740003874edc13e468d19233f99787bedb4bb8e < 013ac469596a0b8671e62d89c89ae0bd46bbe667`
- `Linux >= e740003874edc13e468d19233f99787bedb4bb8e < ccef79af58b43787c25710c9da96651c6ddfe50f`
- `Linux >= e740003874edc13e468d19233f99787bedb4bb8e < 6d389382ee655128056fbdab86baad8495ffbf33`
- `Linux >= e740003874edc13e468d19233f99787bedb4bb8e < ccca14bbdcc25829d355b9f4d3249f43dadb71c1`
- `Linux >= e740003874edc13e468d19233f99787bedb4bb8e < 3def995c4ede842adf509c410e92d09a0cedc965`
- `Linux 5.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.