CVE-2026-98571net: stmmac: clear stale buf->page after recycling on skb build failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: clear stale buf->page after recycling on skb build failure In stmmac_rx(), when napi_build_skb() fails the descriptor page is recycled back to the page pool with page_pool_recycle_direct(), but buf->page is left pointing at the recycled page, unlike every other consumption site in the function which clears the pointer after handing the page away. With the stale pointer stmmac_rx_refill() skips the replacement allocation and programs the already-recycled page back into the RX descriptor. Clear buf->page on the napi_build_skb() failure path to keep the buffer lifecycle consistent with the other consumption sites.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from df542f669307918f054a17878ff6dd1ddbb2fe18 before 501baaeca7d128fa0a2f6953cf5873c5b0d7cf89; from df542f669307918f054a17878ff6dd1ddbb2fe18 before 298673397ea3f6f5811b84f0d9f71eac71dda2e3; from df542f669307918f054a17878ff6dd1ddbb2fe18 before 0a7822e34a0bfde31b194ac3da3253e5032b44cc | CNA record |
References
- https://git.kernel.org/stable/c/501baaeca7d128fa0a2f6953cf5873c5b0d7cf89
- https://git.kernel.org/stable/c/298673397ea3f6f5811b84f0d9f71eac71dda2e3
- https://git.kernel.org/stable/c/0a7822e34a0bfde31b194ac3da3253e5032b44cc
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.