CVE-2026-43014 net: macb: properly unregister fixed rate clocks

Medium 5.5 Published Updated

A resource leak in the Linux kernel macb network driver can lead to memory exhaustion and denial of service.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2026-43014?

CVE-2026-43014 is a medium-severity vulnerability in Linux kernel, published on 1 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In the Linux kernel, the following vulnerability has been resolved:

net: macb: properly unregister fixed rate clocks

The additional resources allocated with clk_register_fixed_rate() need to be released with clk_unregister_fixed_rate(), otherwise they are lost.

Which versions are affected by CVE-2026-43014?

It affects 1 product.

Products include Linux kernel.

How do I fix CVE-2026-43014?

Apply the vendor's patch.

Is CVE-2026-43014 being exploited?

There is no known exploitation of CVE-2026-43014 in the wild and no public exploit code.

All Linux kernel vulnerabilities

Sources

Also known as BELL-CVE-2026-43014, DEBIAN-CVE-2026-43014, GHSA-2h69-pcrh-6qpw, ROOT-OS-DEBIAN-11-CVE-2026-43014, ROOT-OS-UBUNTU-2204-CVE-2026-43014, ROOT-OS-UBUNTU-2404-CVE-2026-43014 and 1 more.

Is CVE-2026-43014 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free