CVE-2026-43419None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() Add __putname() calls to error code paths that did not free the "path" pointer obtained by __getname(). If ownership …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.1%
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix memory leaks in ceph_mdsc_build_path()
Add __putname() calls to error code paths that did not free the "path" pointer obtained by __getname(). If ownership of this pointer is not passed to the caller via path_info.path, the function must free it before returning.
Linux >= e4b168c64da06954be5d520f6c16469b1cadc069 < d39366c169f873edc8ad21fdf6bf08d1de603dbbLinux >= 3fd945a79e147ee10f84213976889b29049c3519 < 657dc653b06a3cc0282aea447a3f137fa94066a4Linux >= 3fd945a79e147ee10f84213976889b29049c3519 < 5895d0164c84d7fec6abc198920c257f55c51899Linux >= 3fd945a79e147ee10f84213976889b29049c3519 < 097cd68f46686391a98f2618188f0cb7b7570de2Linux >= 3fd945a79e147ee10f84213976889b29049c3519 < 13b8b9d6f59ef17fb96c298c3a0d62a8306950ccLinux >= 3fd945a79e147ee10f84213976889b29049c3519 < 040d159a45ded7f33201421a81df0aa2a86e5a0bLinux 0f2b2d9e881c90402dbe28f9ba831775b7992e1fLinux d42ad3f161a5a487f81915c406f46943c7187a0aLinux >= 6.1.125 < 6.1.191Linux >= 5.10.234 < 5.11Linux >= 5.15.177 < 5.16Linux 6.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-43413Nonescsi: hisi_sas: Fix NULL pointer exception during user_scan()
CVE-2026-43490High· 8.8ksmbd: validate inherited ACE SID length
CVE-2026-43271Nonemd-cluster: fix NULL pointer dereference in process_metadata_update
CVE-2026-43220Noneiommu/amd: serialize sequence allocation under concurrent TLB invalidations
CVE-2026-43129Noneima: verify the previous kernel's IMA buffer lies in addressable RAM
CVE-2026-43170Noneusb: dwc3: gadget: Move vbus draw to workqueue context