CVE-2026-31658

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure.

Add dev_kfree_skb_any() before returning to properly free the skb.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < ae2cd46f57f422b51aedd406ff5d75cbff401d5daffected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < cb1d318702fdf643061350d164250198df4116f2affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < d5ec406f0543bd6cdfd563b08015fdec8c4d5712affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 2eb9d67704ca8f1101f7435b85f113ede471f9f2affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 60f462cd2716d86bd2174f9d5e035c9278f30480affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 3aca300e88afe56afb000cdc4c65383014fb17f9affected
LinuxLinuxbbd2190ce96d8fce031f0526c1f970b68adc9d1a < 6dede3967619b5944003227a5d09fdc21ed57d10affected
LinuxLinux3.15affected
LinuxLinux0 < 3.15unaffected
LinuxLinux5.10.253 <= 5.10.*unaffected
LinuxLinux5.15.203 <= 5.15.*unaffected
LinuxLinux6.1.169 <= 6.1.*unaffected
LinuxLinux6.6.135 <= 6.6.*unaffected
LinuxLinux6.12.82 <= 6.12.*unaffected
LinuxLinux6.18.23 <= 6.18.*unaffected
LinuxLinux6.19.13 <= 6.19.*unaffected
LinuxLinux7.0 <= *unaffected

Weaknesses

References