CVE-2026-43041 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak __radix_tree_create() allocates and links intermediate nodes into the tree one by one. If a subsequent allocation fails, the already-linked nodes remain in the tree with no corresponding leaf entry. These orphaned internal nodes are never reclaimed because radix_tree_for_each_slot() only visits slots containing leaf values. The radix_tree API is deprecated in favor of xarray. As suggested by Matthew Wilcox, migrate qrtr_tx_flow from radix_tree to xarray instead of fixing the radix_tree itself [1]. xarray properly handles cleanup of internal nodes — xa_destroy() frees all internal xarray nodes when the qrtr_node is released, preventing the leak. [1] https://lore.kernel.org/all/[email protected]/T/
A memory leak vulnerability has been addressed in the Linux kernel's QRTR (Queuing Radio Transmission Protocol) implementation. The issue arose from the use of a deprecated radix tree API for managing transmission flow control, which led to orphaned internal nodes that were not properly reclaimed. This memory leak occurred because the radix tree only visited slots containing leaf values, leaving linked internal nodes unaccounted for. The vulnerability affected several versions of the Linux kernel.
The vulnerability has been fixed by migrating the transmission flow management from the deprecated radix tree to the xarray API, which properly handles the cleanup of internal nodes. Users should update to the latest version of the Linux kernel where this fix has been applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0fda873092b541bb5a9b87d728a2429f863f8cfa | kernel.org | Patch |
| https://git.kernel.org/stable/c/2428083101f6883f979cceffa76cd8440751ffe6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/4b75ff0aedd6ade1018ad4a3a9d8336794e36e42 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5d2249eefaca59908fe3c264b8eca526424dcfbe | kernel.org | Patch |
| https://git.kernel.org/stable/c/69402908e277dd164bf8d7c8fd0513c0fac28e9e | kernel.org | Patch |
| https://git.kernel.org/stable/c/f2664bc4f0f356f17c2094587a2b3665e3867e44 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f2dd9aaf6e2861337f5835f877a5b2becaf4b015 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ff134cc43972d7ddceff8cfd36cf6b9eaafc00b3 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.6, < 5.10.253 >= 5.11, < 5.15.203 >= 5.16, < 6.1.168 >= 6.2, < 6.6.134 >= 6.7, < 6.12.81 >= 6.13, < 6.18.22 >= 6.19, < 6.19.12 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 8, 2026 | Initial Analysis | [email protected] |
| May 1, 2026 | New CVE Received | kernel.org |