CVE-2026-74525net: sxgbe: free TX rings on RX allocation failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init_dma_desc_rings() only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function are leaked. Rearrange error labels to clean up TX rings upon RX failures.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1edb9ca69e8a7988900fc0283e10550b5592164d before 923389d0370b4117bd579784442e8450f9bb89be; from 1edb9ca69e8a7988900fc0283e10550b5592164d before a07a69f472fff1c6edf77ca97616381657a8444c; from 1edb9ca69e8a7988900fc0283e10550b5592164d before f52de3ea462229457334c9d3c0d95a7856908664; from 1edb9ca69e8a7988900fc0283e10550b5592164d before 3563e2486dcd50a751dbcbc1de37e5186646dce6; from 1edb9ca69e8a7988900fc0283e10550b5592164d before b33644a4f6d8f127c62d7b39f24114d3d2499204; from 1edb9ca69e8a7988900fc0283e10550b5592164d before 42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb; from 1edb9ca69e8a7988900fc0283e10550b5592164d before f2e5bb9fb710553e76a3be9097b448b4e73d8c92; from 1edb9ca69e8a7988900fc0283e10550b5592164d before c870f7e2890b9f78ac84515a9809cc5c183c975e | CNA record |
References
- https://git.kernel.org/stable/c/923389d0370b4117bd579784442e8450f9bb89be
- https://git.kernel.org/stable/c/a07a69f472fff1c6edf77ca97616381657a8444c
- https://git.kernel.org/stable/c/f52de3ea462229457334c9d3c0d95a7856908664
- https://git.kernel.org/stable/c/3563e2486dcd50a751dbcbc1de37e5186646dce6
- https://git.kernel.org/stable/c/b33644a4f6d8f127c62d7b39f24114d3d2499204
- https://git.kernel.org/stable/c/42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb
- https://git.kernel.org/stable/c/f2e5bb9fb710553e76a3be9097b448b4e73d8c92
- https://git.kernel.org/stable/c/c870f7e2890b9f78ac84515a9809cc5c183c975e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.