CVE-2026-80987
Description
In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers ntb_process_tx() handles an oversized buffer by calling tx_handler() with a NULL data pointer and returning success. ntb_netdev therefore neither frees the skb in its completion callback nor takes its enqueue error path, leaking it. Reject oversized buffers in ntb_transport_tx_enqueue() before acquiring a queue entry and return -EMSGSIZE. The caller retains ownership of the buffer, and the preceding netdev patch frees the skb when enqueue returns this permanent error.
How to fix
- Linux Linux4890152a3069f5cb58cc24b08cfd5fe95e568fa1, 668aa3238548584ca9772da9cf43ae8c2389bbf1, 9b0fa8a9e1057614a533cc3f18b17f82aab028d8, b6db88cde0fb5c3bd2d3cd2bebcc06b5ce146e88, a7f22105a7df8c7fd74d0af27ace6fa94fe03d87, 6b6bbc6c878d64eacc60877df49fce7b1b6a08d0, 75a604e9f1cfdebda421062fdf42225ca32154cd, a4f2387db6f1cc2f03abba7f3a6807ad61e26ff7 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | fce8a7bb5b4bfb8a27324703fd5b002ee9247e90 ≤ v < 4890152a3069f5cb58cc24b08cfd5fe95e568fa1, fce8a7bb5b4bfb8a27324703fd5b002ee9247e90 ≤ v < 668aa3238548584ca9772da9cf43ae8c2389bbf1, fce8a7bb5b4bfb8a27324703fd5b002ee9247e90 ≤ v < 9b0fa8a9e1057614a533cc3f18b17f82aab028d8, fce8a7bb5b4bfb8a27324703fd5b002ee9247e90 ≤ v < b6db88cde0fb5c3bd2d3cd2bebcc06b5ce146e88, fce8a7bb5b4bfb8a27324703fd5b002ee9247e90 ≤ v < a7f22105a7df8c7fd74d0af27ace6fa94fe03d87, fce8a7bb5b4bfb8a27324703fd5b002ee9247e90 ≤ v < 6b6bbc6c878d64eacc60877df49fce7b1b6a08d0, fce8a7bb5b4bfb8a27324703fd5b002ee9247e90 ≤ v < 75a604e9f1cfdebda421062fdf42225ca32154cd, fce8a7bb5b4bfb8a27324703fd5b002ee9247e90 ≤ v < a4f2387db6f1cc2f03abba7f3a6807ad61e26ff7, 3.9 | 4890152a3069f5cb58cc24b08cfd5fe95e568fa1, 668aa3238548584ca9772da9cf43ae8c2389bbf1, 9b0fa8a9e1057614a533cc3f18b17f82aab028d8, b6db88cde0fb5c3bd2d3cd2bebcc06b5ce146e88, a7f22105a7df8c7fd74d0af27ace6fa94fe03d87, 6b6bbc6c878d64eacc60877df49fce7b1b6a08d0, 75a604e9f1cfdebda421062fdf42225ca32154cd, a4f2387db6f1cc2f03abba7f3a6807ad61e26ff7 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.