CVE-2026-43015: Linux kernel · net: macb: fix clk handling on PCI glue driver removal
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 12 Nov 2026, 00:50 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 1 May 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 11 Nov 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Linux Linux | Affected
| Fixed in– |
AI-suggested
A fix for this vulnerability is available in the Linux kernel versions that include the relevant patch. Users should upgrade to a fixed kernel version to remediate this issue. Since this is a kernel-level flaw, applying the official kernel update is the recommended mitigation.
Description
CVE-2026-43015 is a use-after-free vulnerability in the Linux kernel's macb network driver related to clock (clk) handling during PCI glue driver removal. The issue occurs because platform_device_unregister() may still attempt to use registered clocks during runtime resume callbacks, leading to a use-after-free condition. The vulnerability has been addressed by saving pointers to clocks into local variables before the platform device is unregistered to prevent invalid memory access.
References
- git.kernel.org/stable/c/bf64cae913cdd4821f13d5d1d68900c0891bef69 (opens in a new tab)
- git.kernel.org/stable/c/67f70841a175fa3469119f52d77a3662c07507a2 (opens in a new tab)
- git.kernel.org/stable/c/2d96204e4184d6f7dd2f93c6f218fd0c1f55e9ae (opens in a new tab)
- git.kernel.org/stable/c/b3f799cdf830df1782ae463cf15ace35015be99e (opens in a new tab)
- git.kernel.org/stable/c/f310a836da90d0f0321b14d446c071af63f9ee4c (opens in a new tab)
- git.kernel.org/stable/c/16ab4c0e2b15df5d33bfcb9ea8e4441b85dd4a57 (opens in a new tab)
- git.kernel.org/stable/c/3496fb9e66f79d4def3bb7ec7563e3eaa33a688f (opens in a new tab)
- git.kernel.org/stable/c/ce8fe5287b87e24e225c342f3b0ec04f0b3680fe (opens in a new tab)