exploitDog

CVE-2026-31658

Опубликовано: 24 апр. 2026

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure.

Add dev_kfree_skb_any() before returning to properly free the skb.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.15.1 (включая) до 5.10.253 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.203 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.169 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.135 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.82 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.18.23 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.19 (включая) до 6.19.13 (исключая)

cpe:2.3:o:linux:linux_kernel:3.15:-:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*

EPSS

Процентиль: 2%

0.00114

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-401

Связанные уязвимости

CVE-2026-31658

CVSS3: 5.5

ubuntu

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure. Add dev_kfree_skb_any() before returning to properly free the skb.

CVE-2026-31658

redhat

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure. Add dev_kfree_skb_any() before returning to properly free the skb.

CVE-2026-31658

CVSS3: 7.1

msrc

3 месяца назад

net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

CVE-2026-31658

CVSS3: 5.5

debian

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: n ...

GHSA-fm9r-m74h-jfjj

CVSS3: 5.5

github

3 месяца назад

In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure. Add dev_kfree_skb_any() before returning to properly free the skb.

EPSS

Процентиль: 2%

0.00114

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-401