CVE-2026-68135
Description
In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources. Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails. This issue was found by an in-house static analysis tool.
How to fix
- Linux Linux690ecc13a4032e5cae1dc6659512f32b033533b0, 2b19fe277645fd1aeb18fd4ecdcf31966080dee7, bcd43ee1f25b682151df213c06a99b2e1c1cf2e5, e054dcd990d8180cde529ea28ce0838e76a5ad5e, 67a7614bde310da006ab259f4f163d3fb0f9e253, 80d977f280b4eccd4ac5369871d0ecb2b9c9a49d, a0f247d63489a107bbc3b712a77b302af2a2a173, 14fa65d10f5696b063a7d8d26e8291ea84a2c6ed or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 701a0fd5231866db08cebcd502894699f49cb960 ≤ v < 690ecc13a4032e5cae1dc6659512f32b033533b0, 701a0fd5231866db08cebcd502894699f49cb960 ≤ v < 2b19fe277645fd1aeb18fd4ecdcf31966080dee7, 701a0fd5231866db08cebcd502894699f49cb960 ≤ v < bcd43ee1f25b682151df213c06a99b2e1c1cf2e5, 701a0fd5231866db08cebcd502894699f49cb960 ≤ v < e054dcd990d8180cde529ea28ce0838e76a5ad5e, 701a0fd5231866db08cebcd502894699f49cb960 ≤ v < 67a7614bde310da006ab259f4f163d3fb0f9e253, 701a0fd5231866db08cebcd502894699f49cb960 ≤ v < 80d977f280b4eccd4ac5369871d0ecb2b9c9a49d, 701a0fd5231866db08cebcd502894699f49cb960 ≤ v < a0f247d63489a107bbc3b712a77b302af2a2a173, 701a0fd5231866db08cebcd502894699f49cb960 ≤ v < 14fa65d10f5696b063a7d8d26e8291ea84a2c6ed, 4.5 | 690ecc13a4032e5cae1dc6659512f32b033533b0, 2b19fe277645fd1aeb18fd4ecdcf31966080dee7, bcd43ee1f25b682151df213c06a99b2e1c1cf2e5, e054dcd990d8180cde529ea28ce0838e76a5ad5e, 67a7614bde310da006ab259f4f163d3fb0f9e253, 80d977f280b4eccd4ac5369871d0ecb2b9c9a49d, a0f247d63489a107bbc3b712a77b302af2a2a173, 14fa65d10f5696b063a7d8d26e8291ea84a2c6ed |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.