CVE-2026-43089
In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has
CVSS
5.5
Medium
EPSS
0.1%
p3
KEV
—
Exploit Today
1
0-100
Published: May 6, 2026 · Last modified: Oct 15, 2026 · CWE-401
0.1%EPSS · 30 days0.2%
2026-09-282026-10-25
In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() struct xfrm_usersa_id has a one-byte padding hole after the proto field, which ends up never getting set to zero before copying out to userspace. Fix that up by zeroing out the whole structure before setting individual variables.
- git.kernel.orghttps://git.kernel.org/stable/c/1beb76b2053b68c491b78370794b8ff63c8f8c02
- git.kernel.orghttps://git.kernel.org/stable/c/521385cbd50ca9474396d88462fcdfa6489685d9
- git.kernel.orghttps://git.kernel.org/stable/c/5a1a4b049ddde41466ccac0daeec326254b133f2
- git.kernel.orghttps://git.kernel.org/stable/c/700c9622b23c33b5933e6dcea816492c064e4e10
- git.kernel.orghttps://git.kernel.org/stable/c/72a8de41c3eb4dcf22bf3b674ea38fb2f75d6f32
- git.kernel.orghttps://git.kernel.org/stable/c/c2779ae9a3e5a044e5ccd564681511bbbcc5fc0f
- git.kernel.orghttps://git.kernel.org/stable/c/d3125c541a96fb3c0fc7210112684baf22b6c24d
- git.kernel.orghttps://git.kernel.org/stable/c/f779a6b6cdb6e12baa0663063ac59ab2a8f20c0c
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-457936.html
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-784472.html
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1161593.3 LOW—
——0ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision list) option, where allocated memory is not cleaned up after use. Attackers can supply input that causes the -cdl option to be processed, repeatedly leaking memory and degrading availability through resource exhaustion.14hCVE-2026-1161582.5 LOW—
——0ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails. Attackers can supply inputs that trigger repeated failed compare operations to exhaust memory and cause denial of service.11hCVE-2026-1161573.3 LOW—
——0ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties. Attackers can repeatedly trigger property reads through five affected PerlMagick code locations to exhaust memory and cause denial of service.11hCVE-2026-1161563.3 LOW—
——0ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the -set profile option can leak memory, potentially exhausting resources and causing a denial of service.11hCVE-2026-1161555.3 MED—
——0ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP profiles by various decoders. Attackers can supply images with a crafted XMP profile that leak memory each time they are processed, leading to resource exhaustion and denial of service.14hCVE-2026-1161545.3 MED—
——0ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting depth limit. Attackers can supply crafted, deeply nested XML data to trigger the leak, causing memory exhaustion and denial of service.11h