CVE-2026-43419

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-08 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() Add __putname() calls to error code paths that did not free the "path" pointer obtained by __getname(). If ownership of this pointer is not passed to the caller via path_info.path, the function must free it before returning.

Weakness Classification (1)

Affected Software (16)

VendorProductVersion
Linux Linux e4b168c64da06954be5d520f6c16469b1cadc069 < d39366c169f873edc8ad21fdf6bf08d1de603dbb
Linux Linux 3fd945a79e147ee10f84213976889b29049c3519 < 657dc653b06a3cc0282aea447a3f137fa94066a4
Linux Linux 3fd945a79e147ee10f84213976889b29049c3519 < 5895d0164c84d7fec6abc198920c257f55c51899
Linux Linux 3fd945a79e147ee10f84213976889b29049c3519 < 097cd68f46686391a98f2618188f0cb7b7570de2
Linux Linux 3fd945a79e147ee10f84213976889b29049c3519 < 13b8b9d6f59ef17fb96c298c3a0d62a8306950cc
Linux Linux 3fd945a79e147ee10f84213976889b29049c3519 < 040d159a45ded7f33201421a81df0aa2a86e5a0b
Linux Linux 0f2b2d9e881c90402dbe28f9ba831775b7992e1f
Linux Linux d42ad3f161a5a487f81915c406f46943c7187a0a
Linux Linux 6.1.125 < 6.1.191
Linux Linux 5.10.234 < 5.11
Linux Linux 5.15.177 < 5.16
Linux Linux 6.6
linux linux_kernel 5.10.234 – 5.11
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.12%
Raw Score 0.001230
Percentile 2.0%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00123
2026-10-31
0.00123
2026-10-30
0.00122
2026-10-29
0.00122

Intelligence Sources

mitre ref →
nvd ref →