CVE-2026-80988
Description
In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 ("ntb: Drop packets when qp link is down") meant to make ntb_transport_tx_enqueue() drop packets submitted while the QP link is down, but it only returns 0 without consuming the packet. Zero means success by this function's contract, so ntb_netdev reports NETDEV_TX_OK and forgets the skb: nothing queued it, nothing frees it, and it leaks, one skb for every transmit racing a link-down. Return -ENOLINK instead, restoring the contract that a non-zero return leaves the buffer owned by the caller. With the preceding patch, ntb_netdev frees the skb on non-retryable enqueue failures and returns NETDEV_TX_OK, so a packet racing with link-down is dropped without leaking or entering a busy retry loop.
How to fix
- Linux Linux76c9ccc0c6bebfc74c0e727eda67687f5103ab06, 96d792c65b9d5f7f9dd86a1004315db59e450c07, 45cc11035165918dd1f81796ea98f81ece20d361, e6cc541fab01099fd8efadfa4f13afdf118bf536, 5eca0d899a3be661a7e2caaaa7467a6fa15d756c, 894e136b432da75c0352c80299807a5c4b04f167, 89177732fe1653bbfef10cf5d99bf20cf57762c2, 873ce713fef5dde0939220f04f3484ec86a16fba, 5.10.270, 5.15.221, 6.1.188, 4.15, 4.20, 5.5, 6.5, 6.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3cfdc448e8bfa8a7eaa5af87f357330566124b78 ≤ v < 76c9ccc0c6bebfc74c0e727eda67687f5103ab06, bfa051f650a7708183bd86901ca4645dcf88c486 ≤ v < 96d792c65b9d5f7f9dd86a1004315db59e450c07, 4f4af6b8b7a23fa37decaf43b55403e6bfd8e219 ≤ v < 45cc11035165918dd1f81796ea98f81ece20d361, f195a1a6fe416882984f8bd6c61afc1383171860 ≤ v < e6cc541fab01099fd8efadfa4f13afdf118bf536, f195a1a6fe416882984f8bd6c61afc1383171860 ≤ v < 5eca0d899a3be661a7e2caaaa7467a6fa15d756c, f195a1a6fe416882984f8bd6c61afc1383171860 ≤ v < 894e136b432da75c0352c80299807a5c4b04f167, f195a1a6fe416882984f8bd6c61afc1383171860 ≤ v < 89177732fe1653bbfef10cf5d99bf20cf57762c2, f195a1a6fe416882984f8bd6c61afc1383171860 ≤ v < 873ce713fef5dde0939220f04f3484ec86a16fba, aa6d6ed213b62cbdb09ea32abbfa085dd987a0c9, a8986a61ebee0b54c5d648444fbae09bd1c6dcd2, 94491412a2afc8a5aea4c5b455aed86d3486f0b1, c2cd5d993f57f819d46fe62387d3cc34d8468e60, 449b1978d4e50b14b2a4de3a26d0b074593926a3, 5.10.195 ≤ v < 5.10.270, 5.15.132 ≤ v < 5.15.221, 6.1.53 ≤ v < 6.1.188, 4.14.326 ≤ v < 4.15, 4.19.295 ≤ v < 4.20, 5.4.257 ≤ v < 5.5, 6.4.16 ≤ v < 6.5, 6.5.3 ≤ v < 6.6, 6.6 | 76c9ccc0c6bebfc74c0e727eda67687f5103ab06, 96d792c65b9d5f7f9dd86a1004315db59e450c07, 45cc11035165918dd1f81796ea98f81ece20d361, e6cc541fab01099fd8efadfa4f13afdf118bf536, 5eca0d899a3be661a7e2caaaa7467a6fa15d756c, 894e136b432da75c0352c80299807a5c4b04f167, 89177732fe1653bbfef10cf5d99bf20cf57762c2, 873ce713fef5dde0939220f04f3484ec86a16fba, 5.10.270, 5.15.221, 6.1.188, 4.15, 4.20, 5.5, 6.5, 6.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.