PT-2026-39125 · Linux · Linux Kernel

CVE-2026-43464

·

Published

2026-05-08

·

Updated

2026-08-30

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the net/mlx5e component regarding XDP multi-buf fragment counting for legacy RQ. XDP multi-buf programs can modify the XDP buffer layout when calling bpf xdp pull data() or bpf xdp adjust tail(). A previous fix failed to properly count dropped fragments on the driver side, leading to page fragment reference counting errors. This can result in a negative pp ref count during page release, potentially causing a system warning or crash during operations such as changing the MTU.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-87057
CVE-2026-43464

Affected Products

Linux Kernel