CVE-2026-43015

CVEs › CVE-2026-43015

Description

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_device_unregister() may still want to use the registered clks during runtime resume callback. Note that there is a commit d82d5303c4c5 ("net: macb: fix use after free on rmmod") that addressed the similar problem of clk vs platform device unregistration but just moved the bug to another place. Save the pointers to clks into local variables for reuse after platform device is unregistered. BUG: KASAN: use-after-free in clk_prepare+0x5a/0x60 Read of size 8 at addr ffff888104f85e00 by task modprobe/597 CPU: 2 PID: 597 Comm: modprobe Not tainted 6.1.164+ #114 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.1-0-g3208b098f51a-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x8d/0xba print_report+0x17f/0x496 kasan_report+0xd9/0x180 clk_prepare+0x5a/0x60 macb_runtime_resume+0x13d/0x410 [macb] pm_generic_runtime_resume+0x97/0xd0 __rpm_callback+0xc8/0x4d0 rpm_callback+0xf6/0x230 rpm_resume+0xeeb/0x1a70 __pm_runtime_resume+0xb4/0x170 bus_remove_device+0x2e3/0x4b0 device_del+0x5b3/0xdc0 platform_device_del+0x4e/0x280 platform_device_unregister+0x11/0x50 pci_device_remove+0xae/0x210 device_remove+0xcb/0x180 device_release_driver_internal+0x529/0x770 driver_detach+0xd4/0x1a0 bus_remove_driver+0x135/0x260 driver_unregister+0x72/0xb0 pci_unregister_driver+0x26/0x220 __do_sys_delete_module+0x32e/0x550 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 </TASK> Allocated by task 519: kasan_save_stack+0x2c/0x50 kasan_set_track+0x21/0x30 __kasan_kmalloc+0x8e/0x90 __clk_register+0x458/0x2890 clk_hw_register+0x1a/0x60 __clk_hw_register_fixed_rate+0x255/0x410 clk_register_fixed_rate+0x3c/0xa0 macb_probe+0x1d8/0x42e [macb_pci] local_pci_probe+0xd7/0x190 pci_device_probe+0x252/0x600 really_probe+0x255/0x7f0 __driver_probe_device+0x1ee/0x330 driver_probe_device+0x4c/0x1f0 __driver_attach+0x1df/0x4e0 bus_for_each_dev+0x15d/0x1f0 bus_add_driver+0x486/0x5e0 driver_register+0x23a/0x3d0 do_one_initcall+0xfd/0x4d0 do_init_module+0x18b/0x5a0 load_module+0x5663/0x7950 __do_sys_finit_module+0x101/0x180 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Freed by task 597: kasan_save_stack+0x2c/0x50 kasan_set_track+0x21/0x30 kasan_save_free_info+0x2a/0x50 __kasan_slab_free+0x106/0x180 __kmem_cache_free+0xbc/0x320 clk_unregister+0x6de/0x8d0 macb_remove+0x73/0xc0 [macb_pci] pci_device_remove+0xae/0x210 device_remove+0xcb/0x180 device_release_driver_internal+0x529/0x770 driver_detach+0xd4/0x1a0 bus_remove_driver+0x135/0x260 driver_unregister+0x72/0xb0 pci_unregister_driver+0x26/0x220 __do_sys_delete_module+0x32e/0x550 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8

Overview

State: PUBLISHED
Assigner (CNA): Linux
CVSS severity: high
CVSS score: 7.8 / 10
CVSS vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Effective score: 7.8 / 10 HIGH source: CNA overview
CWE(s): —
Reserved: 2026-05-01
Published: 2026-05-01 16:15 UTC
Last updated: 2026-05-12 00:16 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/43xxx/CVE-2026-43015.json
Linked Threat: CVE-2026-43015 — CVE-2026-43015

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-01 15:16:45 UTC
NVD last modified: 2026-05-07 20:31:01 UTC
NVD CVSS v3.1: 7.8 / 10 HIGH source: nvd@nist.gov
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability subscore: 1.8 / 10
Impact subscore: 5.9 / 10
EPSS score: 0.0001 (probability of exploitation in next 30 days)
EPSS percentile: 2.55% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

NVD-assigned CWE(s): CWE-416 (differs from the CNA list above)

NVD / KEV / EPSS data refreshed 2026-05-25 09:13 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-26614
Assigner: Linux
Published: May 1, 2026, 2:15:20 PM
Updated: May 23, 2026, 4:05:58 PM
EUVD base score: 0.0 / 10
EUVD-reported EPSS: 0.0100
Vendors: Linux
Products: Linux (a7d521cc726f30b8e679a6f36d04b18a8ab3c536)

Linux (patch: 6.1.168)

Linux (d82d5303c4c539db86588ffb5dc5b26c3f1513e8 <3496fb9e66f79d4def3bb7ec7563e3eaa33a688f)

Linux (patch: 5.10.253)

Linux (5.15)

Linux (1da750d1e2140ef43d64d17f301ff6f41b45541e)

Linux (4.19.209 <4.20)

Linux (patch: 7.0)

Linux (5.4.150 <5.5)

Linux (d82d5303c4c539db86588ffb5dc5b26c3f1513e8 <f310a836da90d0f0321b14d446c071af63f9ee4c)

Linux (d82d5303c4c539db86588ffb5dc5b26c3f1513e8 <b3f799cdf830df1782ae463cf15ace35015be99e)

Linux (patch: 6.19.12)

Linux (7721221e87d25c9840d9ca6b986dbdc410d5ce2b <bf64cae913cdd4821f13d5d1d68900c0891bef69)

Linux (5.10.70 <5.10.253)

Linux (4.14.249 <4.15)

Linux (d82d5303c4c539db86588ffb5dc5b26c3f1513e8 <2d96204e4184d6f7dd2f93c6f218fd0c1f55e9ae)

Linux (5.14.9 <5.15)

Linux (patch: 6.18.22)

Linux (d82d5303c4c539db86588ffb5dc5b26c3f1513e8 <16ab4c0e2b15df5d33bfcb9ea8e4441b85dd4a57)

Linux (patch: 0)

Linux (d82d5303c4c539db86588ffb5dc5b26c3f1513e8 <ce8fe5287b87e24e225c342f3b0ec04f0b3680fe)

Linux (46670fb832ee80943715df618632ca13c2e96f2b)

Linux (4ad6f2d23b0f6ac0d3e5f3102a4256d1c86c90f5)

Linux (patch: 5.15.203)

Linux (patch: 6.6.134)

Linux (patch: 6.12.81)

Linux (d82d5303c4c539db86588ffb5dc5b26c3f1513e8 <67f70841a175fa3469119f52d77a3662c07507a2)

ENISA description: In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver removal platform_device_unregister() may still want to use the registered clks during runtime resume callback. Note that there is a commit d82d5303c4c5 ("net: macb: fix use after free on rmmod") that addressed the similar problem of clk vs platform device unregistration but just moved the bug to another place. Save the pointers to clks into local variables for reuse after platform device is unregistered. BUG: KASAN: use-after-free in clk_prepare+0x5a/0x60 Read of size 8 at addr ffff888104f85e00 by task modprobe/597 CPU: 2 PID: 597 Comm: modprobe Not tainted 6.1.164+ #114 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.1-0-g3208b098f51a-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x8d/0xba print_report+0x17f/0x496 kasan_report+0xd9/0x180 clk_prepare+0x5a/0x60 macb_runtime_resume+0x13d/0x410 [macb] pm_generic_runtime_resume+0x97/0xd0 __rpm_callback+0xc8/0x4d0 rpm_callback+0xf6/0x230 rpm_resume+0xeeb/0x1a70 __pm_runtime_resume+0xb4/0x170 bus_remove_device+0x2e3/0x4b0 device_del+0x5b3/0xdc0 platform_device_del+0x4e/0x280 platform_device_unregister+0x11/0x50 pci_device_remove+0xae/0x210 device_remove+0xcb/0x180 device_release_driver_internal+0x529/0x770 driver_detach+0xd4/0x1a0 bus_remove_driver+0x135/0x260 driver_unregister+0x72/0xb0 pci_unregister_driver+0x26/0x220 __do_sys_delete_module+0x32e/0x550 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 </TASK> Allocated by task 519: kasan_save_stack+0x2c/0x50 kasan_set_track+0x21/0x30 __kasan_kmalloc+0x8e/0x90 __clk_register+0x458/0x2890 clk_hw_register+0x1a/0x60 __clk_hw_register_fixed_rate+0x255/0x410 clk_register_fixed_rate+0x3c/0xa0 macb_probe+0x1d8/0x42e [macb_pci] local_pci_probe+0xd7/0x190 pci_device_probe+0x252/0x600 really_probe+0x255/0x7f0 __driver_probe_device+0x1ee/0x330 driver_probe_device+0x4c/0x1f0 __driver_attach+0x1df/0x4e0 bus_for_each_dev+0x15d/0x1f0 bus_add_driver+0x486/0x5e0 driver_register+0x23a/0x3d0 do_one_initcall+0xfd/0x4d0 do_init_module+0x18b/0x5a0 load_module+0x5663/0x7950 __do_sys_finit_module+0x101/0x180 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Freed by task 597: kasan_save_stack+0x2c/0x50 kasan_set_track+0x21/0x30 kasan_save_free_info+0x2a/0x50 __kasan_slab_free+0x106/0x180 __kmem_cache_free+0xbc/0x320 clk_unregister+0x6de/0x8d0 macb_remove+0x73/0xc0 [macb_pci] pci_device_remove+0xae/0x210 device_remove+0xcb/0x180 device_release_driver_internal+0x529/0x770 driver_detach+0xd4/0x1a0 bus_remove_driver+0x135/0x260 driver_unregister+0x72/0xb0 pci_unregister_driver+0x26/0x220 __do_sys_delete_module+0x32e/0x550 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x6e/0xd8

EUVD references (8)

Affected products (2)

Vendor	Product	Versions	Platforms
Linux	Linux	`7721221e87d25c9840d9ca6b986dbdc410d5ce2b` (affected), `d82d5303c4c539db86588ffb5dc5b26c3f1513e8` (affected), `d82d5303c4c539db86588ffb5dc5b26c3f1513e8` (affected), `d82d5303c4c539db86588ffb5dc5b26c3f1513e8` (affected), `d82d5303c4c539db86588ffb5dc5b26c3f1513e8` (affected), `d82d5303c4c539db86588ffb5dc5b26c3f1513e8` (affected), `d82d5303c4c539db86588ffb5dc5b26c3f1513e8` (affected), `d82d5303c4c539db86588ffb5dc5b26c3f1513e8` (affected), `a7d521cc726f30b8e679a6f36d04b18a8ab3c536` (affected), `46670fb832ee80943715df618632ca13c2e96f2b` (affected), `1da750d1e2140ef43d64d17f301ff6f41b45541e` (affected), `4ad6f2d23b0f6ac0d3e5f3102a4256d1c86c90f5` (affected)	—
Linux	Linux	`5.15` (affected), `0` (unaffected), `5.10.253` (unaffected), `5.15.203` (unaffected), `6.1.168` (unaffected), `6.6.134` (unaffected), `6.12.81` (unaffected), `6.18.22` (unaffected), `6.19.12` (unaffected), `7.0` (unaffected)	—

Affected products — CPE 2.3 (14) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.15:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*

Vendor references (8)

References embedded in the original CVE record by the assigning CNA.

Web references (15)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

http://cwe.mitre.org/data/definitions/416.html rapid7:cwe.mitre.org
http://rel-1.16.1-0-g3208b098f51a-prebuilt.qemu.org rapid7:rel-1.16.1-0-g3208b098f51a-prebuilt.qemu.org
https://attackerkb.com/topics/CVE-2026-43015 rapid7:attackerkb.com
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26614 rapid7:euvd.enisa.europa.eu
https://git.kernel.org/stable/c/16ab4c0e2b15df5d33bfcb9ea8e4441b85dd4a57 tenable:git.kernel.org
https://git.kernel.org/stable/c/2d96204e4184d6f7dd2f93c6f218fd0c1f55e9ae tenable:git.kernel.org
https://git.kernel.org/stable/c/3496fb9e66f79d4def3bb7ec7563e3eaa33a688f tenable:git.kernel.org
https://git.kernel.org/stable/c/67f70841a175fa3469119f52d77a3662c07507a2 tenable:git.kernel.org
https://git.kernel.org/stable/c/b3f799cdf830df1782ae463cf15ace35015be99e tenable:git.kernel.org
https://git.kernel.org/stable/c/bf64cae913cdd4821f13d5d1d68900c0891bef69 tenable:git.kernel.org
https://git.kernel.org/stable/c/ce8fe5287b87e24e225c342f3b0ec04f0b3680fe tenable:git.kernel.org
https://git.kernel.org/stable/c/f310a836da90d0f0321b14d446c071af63f9ee4c tenable:git.kernel.org
https://nvd.nist.gov/vuln/detail/CVE-2026-43015 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2026-43015 tenable:www.cve.org
https://www.first.org/epss/ tenable:www.first.org

NVD-tagged references (8)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://git.kernel.org/stable/c/16ab4c0e2b15df5d33bfcb9ea8e4441b85dd4a57 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/2d96204e4184d6f7dd2f93c6f218fd0c1f55e9ae 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/3496fb9e66f79d4def3bb7ec7563e3eaa33a688f 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/67f70841a175fa3469119f52d77a3662c07507a2 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/b3f799cdf830df1782ae463cf15ace35015be99e 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/bf64cae913cdd4821f13d5d1d68900c0891bef69 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/ce8fe5287b87e24e225c342f3b0ec04f0b3680fe 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch
https://git.kernel.org/stable/c/f310a836da90d0f0321b14d446c071af63f9ee4c 416baaa9-dc9f-4396-8d5f-8c081fb06d67 Patch

Remediations (18)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

How to Fix Error Code 15: "This Request Was Blocked by the ... - Appuals

web:appuals.com

How to Fix Error Code 15: "This Request Was Blocked by the Security Rules" By Kevin Arrows Updated on October 21, 2024 Kevin is a certified Network Engineer

2026-05-23 20:23 UTC
Microsoft Releases Mitigation for Windows BitLocker Security Bypass 0 ...

web:cybersecuritynews.com

No patch has been released yet; Microsoft has instead issued a multi-step manual mitigation guide while a formal security update is prepared. Windows BitLocker Security Bypass The vulnerability originates in WinRE's handling of the BootExecute registry value under HKLM\ControlSet001\Control\Session Manager.

2026-05-23 20:23 UTC
Fix licensing errors in Creative Cloud apps - Adobe Inc.

web:helpx.adobe.com

Use this document to troubleshoot licensing errors in Creative Cloud.

2026-05-23 20:23 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-23 20:23 UTC
Microsoft Rushes to Mitigate Dangerous New "YellowKey" Windows Exploit

web:windowsreport.com

The newly exposed Windows security flaw, dubbed "YellowKey," has become a major headache for Microsoft. After the exploit details leaked publicly alongside a working proof-of-concept, the company has now rushed out official mitigation guidance while it prepares a permanent fix . The vulnerability reportedly targets BitLocker-protected systems and could allow attackers direct access to ...

2026-05-23 20:23 UTC
How to reinstall or repair your Autodesk product

web:www.autodesk.com

Select Repair or Reinstall. On the Repair or Reinstall page, select one of the following options and click Repair / Reinstall to start the process. Repair. This option replaces all registry entries that the product initially installed and restores it to its default state. If you are missing product files, use this option. Reinstall. This option repairs the registry and reinstalls all files ...

2026-05-23 20:23 UTC
CISA Adds Six Known Exploited Vulnerabilities to Catalog

web:www.cisa.gov

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

2026-05-23 20:23 UTC
February 2026 Patch Tuesday: Updates and Analysis | CrowdStrike

web:www.crowdstrike.com

Microsoft's February 2026 Patch Tuesday addresses 59 CVEs , featuring six exploited vulnerabilities, three of which were publicly known, and five Critical vulnerabilities.

2026-05-23 20:23 UTC
Microsoft fixes six zero-days on February 2026 Patch Tuesday

web:www.csoonline.com

Microsoft highlighted six new and actively exploited vulnerabilities among the 60 fixes issued in today's February Patch Tuesday releases.

2026-05-23 20:23 UTC
CVE: Common Vulnerabilities and Exposures

web:www.cve.org

At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

2026-05-23 20:23 UTC
Mitigate RedSun Zero-Day Without A Patch | Qualys

web:blog.qualys.com

RedSun is a zero-day LPE in Microsoft Defender with no patch available. Learn how to detect and mitigate it instantly using Qualys VMDR and TruRisk™ Eliminate.

2026-05-26 02:45 UTC
Microsoft Patch Tuesday, April 2026 Security Update Review

web:threatprotect.qualys.com

Zero-day Vulnerabilities Patched in April Patch Tuesday Edition CVE - 2026 -33825: Microsoft Defender Elevation of Privilege Vulnerability Microsoft Defender is a comprehensive, AI-powered security suite that provides malware protection, phishing detection, and web protection for individuals and businesses.

2026-05-26 02:45 UTC
Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-days

web:www.bleepingcomputer.com

Today is Microsoft's April 2026 Patch Tuesday with security updates for 167 flaws, including 2 zero-day vulnerabilities.

2026-05-26 02:45 UTC
May 2026 Patch Tuesday: Updates and Analysis | CrowdStrike

web:www.crowdstrike.com

Microsoft has released security updates for 130 vulnerabilities, including 30 critical, in its May 2026 Patch Tuesday rollout.

2026-05-26 02:45 UTC
Microsoft Patch Tuesday - May 2026 - Lansweeper

web:www.lansweeper.com

Which vulnerabilities, issues, and other things did Microsoft update? Discover what's new using Lansweeper's Patch Tuesday May 2026 summary.

2026-05-26 02:45 UTC
Microsoft mitigates YellowKey BitLocker bypass, no patch yet

web:www.notebookcheck.net

Microsoft released mitigation steps for YellowKey ( CVE - 2026 -45585), a BitLocker bypass that grants physical attackers access to encrypted Windows drives.

2026-05-26 02:45 UTC
Microsoft Warns: Windows Zero-Day 'YellowKey' Can Bypass BitLocker

web:www.techrepublic.com

Microsoft has released a temporary mitigation for YellowKey, a Windows zero-day that can reportedly bypass BitLocker protections.

2026-05-26 02:45 UTC
Patch Tuesday May 2026: Security Updates & CVE Analysis

web:zecurit.com

Get the complete breakdown of Microsoft's May 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

2026-05-26 02:45 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-43015.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/cadence/macb_pci.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "bf64cae913cdd4821f13d5d1d68900c0891bef69",
              "status": "affected",
              "version": "7721221e87d25c9840d9ca6b986dbdc410d5ce2b",
              "versionType": "git"
            },
            {
              "lessThan": "67f70841a175fa3469119f52d77a3662c07507a2",
              "status": "affected",
              "version": "d82d5303c4c539db86588ffb5dc5b26c3f1513e8",
              "versionType": "git"
            },
            {
              "lessThan": "2d96204e4184d6f7dd2f93c6f218fd0c1f55e9ae",
              "status": "affected",
              "version": "d82d5303c4c539db86588ffb5dc5b26c3f1513e8",
              "versionType": "git"
            },
            {
              "lessThan": "b3f799cdf830df1782ae463cf15ace35015be99e",
              "status": "affected",
              "version": "d82d5303c4c539db86588ffb5dc5b26c3f1513e8",
              "versionType": "git"
            },
            {
              "lessThan": "f310a836da90d0f0321b14d446c071af63f9ee4c",
              "status": "affected",
              "version": "d82d5303c4c539db86588ffb5dc5b26c3f1513e8",
              "versionType": "git"
            },
            {
              "lessThan": "16ab4c0e2b15df5d33bfcb9ea8e4441b85dd4a57",
              "status": "affected",
              "version": "d82d5303c4c539db86588ffb5dc5b26c3f1513e8",
              "versionType": "git"
            },
            {
              "lessThan": "3496fb9e66f79d4def3bb7ec7563e3eaa33a688f",
              "status": "affected",
              "version": "d82d5303c4c539db86588ffb5dc5b26c3f1513e8",
              "versionType": "git"
            },
            {
              "lessThan": "ce8fe5287b87e24e225c342f3b0ec04f0b3680fe",
              "status": "affected",
              "version": "d82d5303c4c539db86588ffb5dc5b26c3f1513e8",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a7d521cc726f30b8e679a6f36d04b18a8ab3c536",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "46670fb832ee80943715df618632ca13c2e96f2b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1da750d1e2140ef43d64d17f301ff6f41b45541e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4ad6f2d23b0f6ac0d3e5f3102a4256d1c86c90f5",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/cadence/macb_pci.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.15"
            },
            {
              "lessThan": "5.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.253",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.203",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.134",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.81",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.22",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.253",
                  "versionStartIncluding": "5.10.70",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.203",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.168",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.134",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.81",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.22",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.12",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "5.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.249",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.209",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.150",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.14.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: fix clk handling on PCI glue driver removal\n\nplatform_device_unregister() may still want to use the registered clks\nduring runtime resume callback.\n\nNote that there is a commit d82d5303c4c5 (\"net: macb: fix use after free\non rmmod\") that addressed the similar problem of clk vs platform device\nunregistration but just moved the bug to another place.\n\nSave the pointers to clks into local variables for reuse after platform\ndevice is unregistered.\n\nBUG: KASAN: use-after-free in clk_prepare+0x5a/0x60\nRead of size 8 at addr ffff888104f85e00 by task modprobe/597\n\nCPU: 2 PID: 597 Comm: modprobe Not tainted 6.1.164+ #114\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.1-0-g3208b098f51a-prebuilt.qemu.org 04/01/2014\nCall Trace:\n <TASK>\n dump_stack_lvl+0x8d/0xba\n print_report+0x17f/0x496\n kasan_report+0xd9/0x180\n clk_prepare+0x5a/0x60\n macb_runtime_resume+0x13d/0x410 [macb]\n pm_generic_runtime_resume+0x97/0xd0\n __rpm_callback+0xc8/0x4d0\n rpm_callback+0xf6/0x230\n rpm_resume+0xeeb/0x1a70\n __pm_runtime_resume+0xb4/0x170\n bus_remove_device+0x2e3/0x4b0\n device_del+0x5b3/0xdc0\n platform_device_del+0x4e/0x280\n platform_device_unregister+0x11/0x50\n pci_device_remove+0xae/0x210\n device_remove+0xcb/0x180\n device_release_driver_internal+0x529/0x770\n driver_detach+0xd4/0x1a0\n bus_remove_driver+0x135/0x260\n driver_unregister+0x72/0xb0\n pci_unregister_driver+0x26/0x220\n __do_sys_delete_module+0x32e/0x550\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n </TASK>\n\nAllocated by task 519:\n kasan_save_stack+0x2c/0x50\n kasan_set_track+0x21/0x30\n __kasan_kmalloc+0x8e/0x90\n __clk_register+0x458/0x2890\n clk_hw_register+0x1a/0x60\n __clk_hw_register_fixed_rate+0x255/0x410\n clk_register_fixed_rate+0x3c/0xa0\n macb_probe+0x1d8/0x42e [macb_pci]\n local_pci_probe+0xd7/0x190\n pci_device_probe+0x252/0x600\n really_probe+0x255/0x7f0\n __driver_probe_device+0x1ee/0x330\n driver_probe_device+0x4c/0x1f0\n __driver_attach+0x1df/0x4e0\n bus_for_each_dev+0x15d/0x1f0\n bus_add_driver+0x486/0x5e0\n driver_register+0x23a/0x3d0\n do_one_initcall+0xfd/0x4d0\n do_init_module+0x18b/0x5a0\n load_module+0x5663/0x7950\n __do_sys_finit_module+0x101/0x180\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n\nFreed by task 597:\n kasan_save_stack+0x2c/0x50\n kasan_set_track+0x21/0x30\n kasan_save_free_info+0x2a/0x50\n __kasan_slab_free+0x106/0x180\n __kmem_cache_free+0xbc/0x320\n clk_unregister+0x6de/0x8d0\n macb_remove+0x73/0xc0 [macb_pci]\n pci_device_remove+0xae/0x210\n device_remove+0xcb/0x180\n device_release_driver_internal+0x529/0x770\n driver_detach+0xd4/0x1a0\n bus_remove_driver+0x135/0x260\n driver_unregister+0x72/0xb0\n pci_unregister_driver+0x26/0x220\n __do_sys_delete_module+0x32e/0x550\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T22:16:03.439Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/bf64cae913cdd4821f13d5d1d68900c0891bef69"
        },
        {
          "url": "https://git.kernel.org/stable/c/67f70841a175fa3469119f52d77a3662c07507a2"
        },
        {
          "url": "https://git.kernel.org/stable/c/2d96204e4184d6f7dd2f93c6f218fd0c1f55e9ae"
        },
        {
          "url": "https://git.kernel.org/stable/c/b3f799cdf830df1782ae463cf15ace35015be99e"
        },
        {
          "url": "https://git.kernel.org/stable/c/f310a836da90d0f0321b14d446c071af63f9ee4c"
        },
        {
          "url": "https://git.kernel.org/stable/c/16ab4c0e2b15df5d33bfcb9ea8e4441b85dd4a57"
        },
        {
          "url": "https://git.kernel.org/stable/c/3496fb9e66f79d4def3bb7ec7563e3eaa33a688f"
        },
        {
          "url": "https://git.kernel.org/stable/c/ce8fe5287b87e24e225c342f3b0ec04f0b3680fe"
        }
      ],
      "title": "net: macb: fix clk handling on PCI glue driver removal",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-43015",
    "datePublished": "2026-05-01T14:15:20.242Z",
    "dateReserved": "2026-05-01T14:12:55.974Z",
    "dateUpdated": "2026-05-11T22:16:03.439Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}