CVE-2026-43466 Linux CVE debrief

Who should care

Linux kernel maintainers, distro security teams, and operators running affected Linux kernels with the mlx5e driver in use, especially on systems where network throughput and IOMMU-backed DMA handling are important.

Technical summary

The reported bug occurs after a TX error CQE triggers recovery. mlx5e_reset_txqsq_cc_pc() reset dma_fifo_cc to 0 but left dma_fifo_pc unchanged, creating a producer/consumer desynchronization in the software-only DMA FIFO. After recovery, new DMA entries could be written at the old producer position while the consumer started from position 0, causing stale DMA addresses to be unmapped. The fix removes the dma_fifo_cc reset so the FIFO counters remain consistent across recovery, matching the existing approach used for skb_fifo counters. NVD lists affected Linux kernel ranges and references multiple official kernel patch links.

Defensive priority

High. Prioritize patching affected kernels on systems that use mlx5e, because the flaw can trigger runtime warnings and incorrect DMA unmapping during network error recovery. Fleet-wide kernel version validation and rapid backporting are the main mitigations supported by the source record.

Recommended defensive actions

• Update to a kernel release that includes the mlx5e recovery fix or the corresponding stable backport.
• Check deployed Linux kernel versions against the affected NVD ranges for Linux kernel releases 4.17 through 6.19.9, including the listed release candidates.
• Verify whether mlx5e is present and actively used on production hosts, then prioritize those systems for remediation.
• Track kernel logs for iommu_dma_unmap_page warnings and mlx5e TX recovery-related errors as indicators of impact.
• Use the official kernel patch references linked from the NVD record to confirm the backported fix in your vendor kernel line.

Evidence notes

The CVE description explicitly states that the bug is in net/mlx5e TX error CQE recovery and that removing the dma_fifo_cc reset fixes a stale DMA unmapping warning. The NVD entry was published on 2026-05-08 and modified on 2026-05-21. NVD marks the issue as CVSS 8.2 HIGH with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H and lists affected Linux kernel version ranges plus multiple official git.kernel.org patch references.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.