PT-2026-39125

CVE-2026-43464

·

Published

2026-05-08

·

Updated

2026-10-17

Description by

CVSS 4.0
8.4
High
MetricsAV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the net/mlx5e component regarding XDP multi-buf fragment counting for legacy RQ. XDP multi-buf programs can modify the XDP buffer layout when calling bpf xdp pull data() or bpf xdp adjust tail(). A previous fix failed to properly count dropped fragments on the driver side, leading to page fragment reference counting errors. This can result in a negative pp ref count during page release, potentially causing a system warning or crash during operations such as changing the MTU.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-87057
USN-8781-1
Found an issue in the description? Have something to add? Feel free to write us 👾