net: sxgbe: free TX rings on RX allocation failure (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 13 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init_dma_desc_rings() only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function are leaked. Rearrange error labels to clean up TX rings upon RX failures.
References
- https://git.kernel.org/stable/c/923389d0370b4117bd579784442e8450f9bb89be
- https://git.kernel.org/stable/c/a07a69f472fff1c6edf77ca97616381657a8444c
- https://git.kernel.org/stable/c/f52de3ea462229457334c9d3c0d95a7856908664
- https://git.kernel.org/stable/c/3563e2486dcd50a751dbcbc1de37e5186646dce6
- https://git.kernel.org/stable/c/b33644a4f6d8f127c62d7b39f24114d3d2499204
- https://git.kernel.org/stable/c/42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb
- https://git.kernel.org/stable/c/f2e5bb9fb710553e76a3be9097b448b4e73d8c92
- https://git.kernel.org/stable/c/c870f7e2890b9f78ac84515a9809cc5c183c975e
European references
- ENISA EUVD · EUVD-2026-59718
- GCVE · GCVE-0-2026-74525
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1232 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1163 — Multiples vulnérabilités dans le noyau Linux de Debian LTS · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1090 — Multiples vulnérabilités dans le noyau Linux de Debian · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 1edb9ca69e8a7988900fc0283e10550b5592164d < 923389d0370b4117bd579784442e8450f9bb89be ; affected 1edb9ca69e8a7988900fc0283e10550b5592164d < a07a69f472fff1c6edf77ca97616381657a8444c ; affected 1edb9ca69e8a7988900fc0283e10550b5592164d < f52de3ea462229457334c9d3c0d95a7856908664 ; affected 1edb9ca69e8a7988900fc0283e10550b5592164d < 3563e2486dcd50a751dbcbc1de37e5186646dce6 ; affected 1edb9ca69e8a7988900fc0283e10550b5592164d < b33644a4f6d8f127c62d7b39f24114d3d2499204 ; affected 1edb9ca69e8a7988900fc0283e10550b5592164d < 42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb |
| Linux · Linux | affected 3.15 ; unaffected 0 < 3.15 ; unaffected 5.10.265 ≤ 5.10.* ; unaffected 5.15.216 ≤ 5.15.* ; unaffected 6.1.183 ≤ 6.1.* ; unaffected 6.6.151 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |