CVE-2026-72017
Description
In the Linux kernel, the following vulnerability has been resolved: net: macb: drop in-flight Tx SKBs on close The MACB driver has since forever leaked the outgoing SKBs that have not yet been marked as completed. They live in queue->tx_skb which gets freed without remorse nor checking. macb_free_consistent() gets called in a few codepaths, but only close will trigger the added expressions. In macb_open() and macb_alloc_consistent() failure cases, queues' tx_skb just got allocated and are empty.
How to fix
- Linux Linux0e9797dc4ebdefe1b7f931b1f92d5e98e5dbf655, 6124bd785073659c99385094657b77382ebce11b, 2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4, 26b131b2d5b55a81ef6182769d28105a870c0eb2, 109241d9880488aafd8e104832b4d4859ad57244, 27f575836cfebbf872dec020428742b10650a955 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 89e5785fc8a6b9eafd37f2318a9a76d479c796be ≤ v < 0e9797dc4ebdefe1b7f931b1f92d5e98e5dbf655, 89e5785fc8a6b9eafd37f2318a9a76d479c796be ≤ v < 6124bd785073659c99385094657b77382ebce11b, 89e5785fc8a6b9eafd37f2318a9a76d479c796be ≤ v < 2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4, 89e5785fc8a6b9eafd37f2318a9a76d479c796be ≤ v < 26b131b2d5b55a81ef6182769d28105a870c0eb2, 89e5785fc8a6b9eafd37f2318a9a76d479c796be ≤ v < 109241d9880488aafd8e104832b4d4859ad57244, 89e5785fc8a6b9eafd37f2318a9a76d479c796be ≤ v < 27f575836cfebbf872dec020428742b10650a955, 2.6.20 | 0e9797dc4ebdefe1b7f931b1f92d5e98e5dbf655, 6124bd785073659c99385094657b77382ebce11b, 2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4, 26b131b2d5b55a81ef6182769d28105a870c0eb2, 109241d9880488aafd8e104832b4d4859ad57244, 27f575836cfebbf872dec020428742b10650a955 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.