CVE-2026-43143 Details
Description
In the Linux kernel, the following vulnerability has been resolved: mfd: core: Add locking around 'mfd_of_node_list' Manipulating a list in the kernel isn't safe without some sort of mutual exclusion. Add a mutex any time we access / modify 'mfd_of_node_list' to prevent possible crashes.
A vulnerability has been identified in the Linux kernel's core multi-function device (MFD) management. The issue arises from the lack of proper locking mechanisms when accessing or modifying the 'mfd_of_node_list', which can lead to unsafe list manipulation and potential crashes. This vulnerability affects the stable group of the Linux kernel.
The vulnerability has been addressed by adding a mutex to synchronize access to the 'mfd_of_node_list', ensuring safe modifications and preventing potential crashes. Users should upgrade to the latest version of the Linux kernel where this fix has been applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/20117c92bcf9c11afd64d7481d8f94fdf410726e | kernel.org | Patch |
| https://git.kernel.org/stable/c/45341856ecda1d56689451abd5cf1d1aa57dbe47 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9b02e3fec3a7fcb990b4d3bd3b13d7edf123dca6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/db131ef9d8980cf60dcac8cf94c036eccf75e5d0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/dcfa679bba02412f2087be21cf06ae88b1f4e0ef | kernel.org | Patch |
| https://git.kernel.org/stable/c/e2e7c275f557e2b75e3128f4818063798248774c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.9, < 6.1.165 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 13, 2026 | Initial Analysis | [email protected] |
| May 6, 2026 | New CVE Received | kernel.org |