CVE-2026-43014net: macb: properly unregister fixed rate clocks
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks The additional resources allocated with clk_register_fixed_rate() need to be released with clk_unregister_fixed_rate(), otherwise they are lost.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Analyzed
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 83a77e9ec4150ee4acc635638f7dedd9da523a26 builds before 54c6f0e7682433abed0304ac2f5cb71a92d4b366; 83a77e9ec4150ee4acc635638f7dedd9da523a26 builds before 015aa24d3721a05b40935b8af78b49cadf616b8d; from 83a77e9ec4150ee4acc635638f7dedd9da523a26 before ec1be2ce0d94506f11b22066fd6dc5eb4341b14f; from 83a77e9ec4150ee4acc635638f7dedd9da523a26 before e1f6f47d6e60d51c3294e5b85787e9aee24c450e; from 83a77e9ec4150ee4acc635638f7dedd9da523a26 before e35dbfdb1b7710f04ff5c9972ea04971d823a22d; from 83a77e9ec4150ee4acc635638f7dedd9da523a26 before 5392a5174df4f5a2fad2f00e8c617394d0efe031; 83a77e9ec4150ee4acc635638f7dedd9da523a26 builds before 6ec567425c057fd850651ee09b31d059ef960e0f; from 83a77e9ec4150ee4acc635638f7dedd9da523a26 before f0f367a4f459cc8118aadc43c6bba53c60d93f8d | CNA record |
linux linux_kernel linux:linux_kernel | from 4.10 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.168; from 6.2 before 6.6.134; from 6.7 before 6.12.81; from 6.13 before 6.18.22; from 6.19 before 6.19.12; 7.0; and 5 more ranges | NVD |
References
- https://git.kernel.org/stable/c/54c6f0e7682433abed0304ac2f5cb71a92d4b366patch
- https://git.kernel.org/stable/c/015aa24d3721a05b40935b8af78b49cadf616b8dpatch
- https://git.kernel.org/stable/c/ec1be2ce0d94506f11b22066fd6dc5eb4341b14fpatch
- https://git.kernel.org/stable/c/e1f6f47d6e60d51c3294e5b85787e9aee24c450epatch
- https://git.kernel.org/stable/c/e35dbfdb1b7710f04ff5c9972ea04971d823a22dpatch
- https://git.kernel.org/stable/c/5392a5174df4f5a2fad2f00e8c617394d0efe031patch
- https://git.kernel.org/stable/c/6ec567425c057fd850651ee09b31d059ef960e0fpatch
- https://git.kernel.org/stable/c/f0f367a4f459cc8118aadc43c6bba53c60d93f8dpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.