CVE-2026-72017net: macb: drop in-flight Tx SKBs on close
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: macb: drop in-flight Tx SKBs on close The MACB driver has since forever leaked the outgoing SKBs that have not yet been marked as completed. They live in queue->tx_skb which gets freed without remorse nor checking. macb_free_consistent() gets called in a few codepaths, but only close will trigger the added expressions. In macb_open() and macb_alloc_consistent() failure cases, queues' tx_skb just got allocated and are empty.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 23, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 89e5785fc8a6b9eafd37f2318a9a76d479c796be builds before 0e9797dc4ebdefe1b7f931b1f92d5e98e5dbf655; from 89e5785fc8a6b9eafd37f2318a9a76d479c796be before 6124bd785073659c99385094657b77382ebce11b; from 89e5785fc8a6b9eafd37f2318a9a76d479c796be before 2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4; 89e5785fc8a6b9eafd37f2318a9a76d479c796be builds before 26b131b2d5b55a81ef6182769d28105a870c0eb2; from 89e5785fc8a6b9eafd37f2318a9a76d479c796be before 109241d9880488aafd8e104832b4d4859ad57244; 89e5785fc8a6b9eafd37f2318a9a76d479c796be builds before 27f575836cfebbf872dec020428742b10650a955 | CNA record |
References
- https://git.kernel.org/stable/c/0e9797dc4ebdefe1b7f931b1f92d5e98e5dbf655
- https://git.kernel.org/stable/c/6124bd785073659c99385094657b77382ebce11b
- https://git.kernel.org/stable/c/2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4
- https://git.kernel.org/stable/c/26b131b2d5b55a81ef6182769d28105a870c0eb2
- https://git.kernel.org/stable/c/109241d9880488aafd8e104832b4d4859ad57244
- https://git.kernel.org/stable/c/27f575836cfebbf872dec020428742b10650a955
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.