Memory Leak Vulnerability in Linux Kernel i2c Implementation by The Linux Foundation

CVE-2026-43457

What is CVE-2026-43457?

A memory leak vulnerability exists in the i2c subsystem of the Linux kernel, where newly allocated socket buffers (skbs) may not be released correctly when the 'allow_rx' flag is set to false. This oversight can lead to resource exhaustion and potential performance degradation. When the network interface receives packets and the flag dictates that reception is disabled, the allocated skb should be freed directly instead of being processed. The associated patches address this issue to ensure proper memory management, preventing unnecessary memory occupancy during operation.

References