CVE-2026-68135net: hip04: fix RX buffer leak on build_skb failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources. Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails. This issue was found by an in-house static analysis tool.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 701a0fd5231866db08cebcd502894699f49cb960 builds before 690ecc13a4032e5cae1dc6659512f32b033533b0; 701a0fd5231866db08cebcd502894699f49cb960 builds before 2b19fe277645fd1aeb18fd4ecdcf31966080dee7; from 701a0fd5231866db08cebcd502894699f49cb960 before bcd43ee1f25b682151df213c06a99b2e1c1cf2e5; from 701a0fd5231866db08cebcd502894699f49cb960 before e054dcd990d8180cde529ea28ce0838e76a5ad5e; 701a0fd5231866db08cebcd502894699f49cb960 builds before 67a7614bde310da006ab259f4f163d3fb0f9e253; 701a0fd5231866db08cebcd502894699f49cb960 builds before 80d977f280b4eccd4ac5369871d0ecb2b9c9a49d; from 701a0fd5231866db08cebcd502894699f49cb960 before a0f247d63489a107bbc3b712a77b302af2a2a173; 701a0fd5231866db08cebcd502894699f49cb960 builds before 14fa65d10f5696b063a7d8d26e8291ea84a2c6ed | CNA record |
References
- https://git.kernel.org/stable/c/690ecc13a4032e5cae1dc6659512f32b033533b0
- https://git.kernel.org/stable/c/2b19fe277645fd1aeb18fd4ecdcf31966080dee7
- https://git.kernel.org/stable/c/bcd43ee1f25b682151df213c06a99b2e1c1cf2e5
- https://git.kernel.org/stable/c/e054dcd990d8180cde529ea28ce0838e76a5ad5e
- https://git.kernel.org/stable/c/67a7614bde310da006ab259f4f163d3fb0f9e253
- https://git.kernel.org/stable/c/80d977f280b4eccd4ac5369871d0ecb2b9c9a49d
- https://git.kernel.org/stable/c/a0f247d63489a107bbc3b712a77b302af2a2a173
- https://git.kernel.org/stable/c/14fa65d10f5696b063a7d8d26e8291ea84a2c6ed
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.