CVE-2026-43455 mctp: route: hold key->lock in mctp_flow_prepare_output()

🗓️ 08 May 2026 14:22:19Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

Resolved: kernel mctp route race in flow prepare output without key lock, causing resource leak.

Reporter	Title	Published	Views	Family All 37
ATTACKERKB	CVE-2026-43455	8 May 202614:22	–	attackerkb
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
Circl	CVE-2026-43455	9 Jul 202601:18	–	circl
CNNVD	Linux kernel 安全漏洞	8 May 202600:00	–	cnnvd
CVE	CVE-2026-43455	8 May 202614:22	–	cve
Cvelist	CVE-2026-43455 mctp: route: hold key->lock in mctp_flow_prepare_output()	8 May 202614:22	–	cvelist
Debian CVE	CVE-2026-43455	8 May 202614:22	–	debiancve
EUVD	EUVD-2026-28761	8 May 202615:31	–	euvd
NVD	CVE-2026-43455	8 May 202615:16	–	nvd
OPENSUSE Linux	Security update for the Linux Kernel (important)	23 Jun 202600:00	–	opensuse

Source	Link
git	www.git.kernel.org/stable/c/0695712f3a6f1a48915f95767cfb42077683dcdc
git	www.git.kernel.org/stable/c/47893166bc5611ee9a20de6b8d2933b2320fb772
git	www.git.kernel.org/stable/c/7d86aa41c073c4e7eb75fd2e674f1fd8f289728a
git	www.git.kernel.org/stable/c/86f5334fcb48a5b611c33364ab52ca684d0f6d91
git	www.git.kernel.org/stable/c/8d27d9b260dd19c1b519e1a13de6448f9984e30e
git	www.git.kernel.org/stable/c/925a5ffd99cddd7a7e41d5ad120c7a2c6d50260f
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43455.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-43455
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

15 Jul 2026 01:49Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.5

EPSS0.00114

kernel mctp route race lock key resource leak flow prepare output