CVE-2026-43457
medium
Red Hat EPSS Score
0.0%
Exploitation probability in 30 days
Top 93% most likely to be exploited
Vulnerability Report
Generated by CyberWatcher
Description
A flaw was found in the Linux kernel's Management Component Transport Protocol (MCTP) over I2C receive path. When the `midev->allow_rx` flag is false, a newly allocated network buffer (skb) is not properly freed. This memory leak can lead to a gradual exhaustion of system memory, potentially allowing a local attacker to cause a Denial of Service (DoS).
CWE
CWE-772Affected Products
Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9