CVE-2026-43419

Updated on 08 May 2026

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in ceph_mdsc_build_path() Add __putname() calls to error code paths that did not free the “path” pointer obtained by __getname(). If ownership of this pointer is not passed to the caller via path_info.path, the function must free it before returning. A flaw was found in the Linux kernel’s Ceph file system component. Improper memory deallocation within the ceph_mdsc_build_path() function can lead to memory leaks. This occurs when the “path” pointer, obtained by __getname(), is not properly freed in error handling paths. Over time, these memory leaks could lead to resource exhaustion, potentially resulting in a Denial of Service (DoS) for the system.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Planned
Ubuntu 24.04 Planned