CVE-2026-64110

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
12/08/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> igc: fix potential skb leak in igc_fpe_xmit_smd_frame()<br /> <br /> When igc_fpe_init_tx_descriptor() fails, no one takes care of an<br /> allocated skb, leaking it. [1]<br /> Use dev_kfree_skb_any() on failure.<br /> <br /> Tested on an I226 adapter with the following command, while injecting<br /> faults in igc_fpe_init_tx_descriptor() to trigger the error path.<br /> # ethtool --set-mm $DEV verify-enabled on tx-enabled on pmac-enabled on<br /> <br /> [1]<br /> unreferenced object 0xffff888113c6cdc0 (size 224):<br /> ...<br /> backtrace (crc be3d3fda):<br /> kmem_cache_alloc_node_noprof+0x3b1/0x410<br /> __alloc_skb+0xde/0x830<br /> igc_fpe_xmit_smd_frame.isra.0+0xad/0x1b0<br /> igc_fpe_send_mpacket+0x37/0x90<br /> ethtool_mmsv_verify_timer+0x15e/0x300

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.16 (including) 6.18.34 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (including) 7.0.11 (excluding)
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*