CVE-2026-43041

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
01/05/2026
Last modified:
08/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak<br /> <br /> __radix_tree_create() allocates and links intermediate nodes into the<br /> tree one by one. If a subsequent allocation fails, the already-linked<br /> nodes remain in the tree with no corresponding leaf entry. These orphaned<br /> internal nodes are never reclaimed because radix_tree_for_each_slot()<br /> only visits slots containing leaf values.<br /> <br /> The radix_tree API is deprecated in favor of xarray. As suggested by<br /> Matthew Wilcox, migrate qrtr_tx_flow from radix_tree to xarray instead<br /> of fixing the radix_tree itself [1]. xarray properly handles cleanup of<br /> internal nodes — xa_destroy() frees all internal xarray nodes when the<br /> qrtr_node is released, preventing the leak.<br /> <br /> [1] https://lore.kernel.org/all/20260225071623.41275-1-jiayuan.chen@linux.dev/T/

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.6 (including) 5.10.253 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.203 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.168 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.134 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.81 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.18.22 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (including) 6.19.12 (excluding)
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*