Boletines de Vulnerabilidades

CVE-2026-43224

   
Software afectado LINUX KERNEL
 
In the Linux kernel, the following vulnerability has been resolved:

io_uring/zcrx: fix sgtable leak on mapping failures

In an unlikely case when io_populate_area_dma() fails, which could only
happen on a PAGE_POOL_32BIT_ARCH_WITH_64BIT_DMA machine,
io_zcrx_map_area() will have an initialised and not freed table. It was
supposed to be cleaned up in the error path, but !is_mapped prevents
that.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-43224