CVE-2026-64110
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
12/08/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
igc: fix potential skb leak in igc_fpe_xmit_smd_frame()<br />
<br />
When igc_fpe_init_tx_descriptor() fails, no one takes care of an<br />
allocated skb, leaking it. [1]<br />
Use dev_kfree_skb_any() on failure.<br />
<br />
Tested on an I226 adapter with the following command, while injecting<br />
faults in igc_fpe_init_tx_descriptor() to trigger the error path.<br />
# ethtool --set-mm $DEV verify-enabled on tx-enabled on pmac-enabled on<br />
<br />
[1]<br />
unreferenced object 0xffff888113c6cdc0 (size 224):<br />
...<br />
backtrace (crc be3d3fda):<br />
kmem_cache_alloc_node_noprof+0x3b1/0x410<br />
__alloc_skb+0xde/0x830<br />
igc_fpe_xmit_smd_frame.isra.0+0xad/0x1b0<br />
igc_fpe_send_mpacket+0x37/0x90<br />
ethtool_mmsv_verify_timer+0x15e/0x300
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.16 (including) | 6.18.34 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (including) | 7.0.11 (excluding) |
| cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



