CVE-2026-43157

octeontx2-af: CGX: fix bitmap leaks

MEDIUM

5.5

CVSS Score

Published: May 6, 2026 at 11:27 AM UTC

Updated: June 17, 2026 at 10:49 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX flow-control bitmaps (rx_fc_pfvf_bmap and tx_fc_pfvf_bmap) are allocated by cgx_lmac_init() but never freed in cgx_lmac_exit(). Unbinding and rebinding the driver therefore triggers kmemleak: unreferenced object (size 16): backtrace: rvu_alloc_bitmap cgx_probe Free both bitmaps during teardown.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

5.18 ≤ v < 6.1.1655.18 ≤ v < 6.12.755.18 ≤ v < 6.18.165.18 ≤ v < 6.19.65.18 ≤ v < 6.6.1285.18 ≤ v < 7.06.13 ≤ v < 6.18.166.19 ≤ v < 6.19.66.2 ≤ v < 6.6.1286.7 ≤ v < 6.12.755.18e740003874edc13e468d19233f99787bedb4bb8e

Vendor states this is fixed in 013ac469596a0b8671e62d89c89ae0bd46bbe667 (fixed)

Vendor states this is fixed in 3def995c4ede842adf509c410e92d09a0cedc965 (fixed)

Vendor states this is fixed in 6d389382ee655128056fbdab86baad8495ffbf33 (fixed)

Vendor states this is fixed in ad8a13a45c5c24d0d32de9a1c3fd58498a675ece (fixed)

Vendor states this is fixed in ccca14bbdcc25829d355b9f4d3249f43dadb71c1 (fixed)

Vendor states this is fixed in ccef79af58b43787c25710c9da96651c6ddfe50f (fixed)

Vendor states this is fixed in 5.18 (unaffected)

Vendor states this is fixed in 6.1.165 (unaffected)

Vendor states this is fixed in 6.12.75 (unaffected)

Vendor states this is fixed in 6.18.16 (unaffected)

Vendor states this is fixed in 6.19.6 (unaffected)

Vendor states this is fixed in 6.6.128 (unaffected)