ROS-20261012-73-0060

The vulnerability of the mctpflowprepareoutput function in the net/mctp/route.c module of the Linux kernel is related to deficiencies in the deserialization mechanism, due to insufficient protection of sensitive data. Exploiting this vulnerability allows an attacker to compromise the...

Linux net/mctp/route.c mctp_flow_prepare_output Heap Buffer Overflow DoS

The vulnerability of the mctpflowprepareoutput function in the net/mctp/route.c module of the Linux kernel is related to deficiencies in the deserialization mechanism, due to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-43455: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: mctp: route: hold key-lock in mctpflowprepareoutput mctpflowprepareoutput checks key-dev and may call mctpdevsetkey, but it does not hold key-lock while doing so. mctpdevsetkey and mctpdevreleasekey are annotated with...