Medium 5.5Published May 6, 2026

CVE-2026-43219net: cpsw_new: Fix potential unregister of netdev that has not been registered yet

Updated under an hour ago (Oct 28, 2026, 1:50 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: Fix potential unregister of netdev that has not been registered yet If an error occurs during register_netdev() for the first MAC in cpsw_register_ports(), even though cpsw->slaves[0].ndev is set to NULL, cpsw->slaves[1].ndev would remain unchanged. This could later cause cpsw_unregister_ports() to attempt unregistering the second MAC. To address this, add a check for ndev->reg_state before calling unregister_netdev(). With this change, setting cpsw->slaves[i].ndev to NULL becomes unnecessary and can be removed accordingly.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Jul 4, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from ed3525eda4c4983fb8509e488de0a351788041ba before da8e1623a3028e1d8c75eec7898d94c6f17dce40; from ed3525eda4c4983fb8509e488de0a351788041ba before d31a12cee10bbc12b4b523a4709fd1fdee8b7d0f; from ed3525eda4c4983fb8509e488de0a351788041ba before 23acc565186ee27e788408cbd81b92730b6aaa3a; from ed3525eda4c4983fb8509e488de0a351788041ba before 67cca9df4d17f2c824655d31195b2e75334ae286; from ed3525eda4c4983fb8509e488de0a351788041ba before 14645799ad5253a028cf662e2f9cd18a68f74b31; from ed3525eda4c4983fb8509e488de0a351788041ba before 29739ec197ed66535bc0b86f14ab66c5f4512138; from ed3525eda4c4983fb8509e488de0a351788041ba before 349c4cac6f54a81fc107589771f88136a2b20415; from ed3525eda4c4983fb8509e488de0a351788041ba before 9d724b34fbe13b71865ad0906a4be97571f19cf5	CNA record
linux linux_kernel linux:linux_kernel	from 5.5 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/da8e1623a3028e1d8c75eec7898d94c6f17dce40
https://git.kernel.org/stable/c/d31a12cee10bbc12b4b523a4709fd1fdee8b7d0f
https://git.kernel.org/stable/c/23acc565186ee27e788408cbd81b92730b6aaa3a
https://git.kernel.org/stable/c/67cca9df4d17f2c824655d31195b2e75334ae286
https://git.kernel.org/stable/c/14645799ad5253a028cf662e2f9cd18a68f74b31
https://git.kernel.org/stable/c/29739ec197ed66535bc0b86f14ab66c5f4512138	patch
https://git.kernel.org/stable/c/349c4cac6f54a81fc107589771f88136a2b20415	patch
https://git.kernel.org/stable/c/9d724b34fbe13b71865ad0906a4be97571f19cf5	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.