Medium 5.5Published May 8, 2026

CVE-2026-43295rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()

Updated under an hour ago (Oct 28, 2026, 4:10 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() When idtab allocation fails, net is not registered with rio_add_net() yet, so kfree(net) is sufficient to release the memory. Set mport->net to NULL to avoid dangling pointer.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e6b585ca6e81badeb3d42db3cc408174f2826034 before 83e579c2f7f6b1706323d744833b26470049dcc2; from e6b585ca6e81badeb3d42db3cc408174f2826034 before 34a4f233df5eef5f1f113b2196142c0568b387f8; from e6b585ca6e81badeb3d42db3cc408174f2826034 before fecf292c6691970897396190855aa38826b7104e; from e6b585ca6e81badeb3d42db3cc408174f2826034 before 649c2e853608cad0b0cba545555d168e67f094b3; from e6b585ca6e81badeb3d42db3cc408174f2826034 before 87272e3e70ec4b666885bd520ff77463c11444ef; from e6b585ca6e81badeb3d42db3cc408174f2826034 before e5a732bfe29451e16abf9c6f07ce5948b22f3d59; from e6b585ca6e81badeb3d42db3cc408174f2826034 before 78812c4fb7ed242d5961bf1337a49070d6487c94; from e6b585ca6e81badeb3d42db3cc408174f2826034 before 666183dcdd9ad3b8156a1df7f204f728f720380f	CNA record
linux linux_kernel linux:linux_kernel	from 4.6 before 5.10.252; from 5.11 before 5.15.202; from 5.16 before 6.1.165; from 6.2 before 6.6.128; from 6.7 before 6.12.75; from 6.13 before 6.18.16; from 6.19 before 6.19.6	NVD

References

References

https://git.kernel.org/stable/c/83e579c2f7f6b1706323d744833b26470049dcc2	patch
https://git.kernel.org/stable/c/34a4f233df5eef5f1f113b2196142c0568b387f8	patch
https://git.kernel.org/stable/c/fecf292c6691970897396190855aa38826b7104e	patch
https://git.kernel.org/stable/c/649c2e853608cad0b0cba545555d168e67f094b3	patch
https://git.kernel.org/stable/c/87272e3e70ec4b666885bd520ff77463c11444ef	patch
https://git.kernel.org/stable/c/e5a732bfe29451e16abf9c6f07ce5948b22f3d59	patch
https://git.kernel.org/stable/c/78812c4fb7ed242d5961bf1337a49070d6487c94	patch
https://git.kernel.org/stable/c/666183dcdd9ad3b8156a1df7f204f728f720380f	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.