{"id":"CVE-2026-43219","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cpsw_new: Fix potential unregister of netdev that has not been registered yet\n\nIf an error occurs during register_netdev() for the first MAC in\ncpsw_register_ports…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cpsw_new: Fix potential unregister of netdev that has not been registered yet\n\nIf an error occurs during register_netdev() for the first MAC in\ncpsw_register_ports…","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 5.5, < 6.18.16","linux_kernel >= 6.19, < 6.19.6"],"patched":["linux_kernel 6.19.6"],"published":"2026-05-06","updated":"2026-07-04","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-43219","references":[{"url":"https://git.kernel.org/stable/c/14645799ad5253a028cf662e2f9cd18a68f74b31","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/23acc565186ee27e788408cbd81b92730b6aaa3a","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/29739ec197ed66535bc0b86f14ab66c5f4512138","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/349c4cac6f54a81fc107589771f88136a2b20415","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/67cca9df4d17f2c824655d31195b2e75334ae286","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9d724b34fbe13b71865ad0906a4be97571f19cf5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d31a12cee10bbc12b4b523a4709fd1fdee8b7d0f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/da8e1623a3028e1d8c75eec7898d94c6f17dce40","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd"],"epss":0.00162,"epssPercentile":0.04709,"ingestedAt":"2026-07-04T12:56:09.376Z","slug":"CVE-2026-43219","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: cpsw_new: Fix potential unregister of netdev that has not been registered yet\n\nIf an error occurs during register_netdev() for the first MAC in\ncpsw_register_ports(), even though cpsw->slaves[0].ndev is set to NULL,\ncpsw->slaves[1].ndev would remain unchanged. This could later cause\ncpsw_unregister_ports() to attempt unregistering the second MAC.\nTo address this, add a check for ndev->reg_state before calling\nunregister_netdev(). With this change, setting cpsw->slaves[i].ndev\nto NULL becomes unnecessary and can be removed accordingly.\n\n## Affected\n\n- `linux_kernel >= 5.5, < 6.18.16`\n- `linux_kernel >= 6.19, < 6.19.6`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.19.6`","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}