CVE-2026-68135

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
10/08/2026
Last modified:
19/08/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: hip04: fix RX buffer leak on build_skb failure<br /> <br /> When build_skb() fails in hip04_rx_poll(), the driver jumps to the<br /> refill path without releasing the current RX buffer and its DMA mapping.<br /> Installing a replacement buffer then overwrites the slot references and<br /> leaks both resources.<br /> <br /> Keep the current slot intact and return budget so NAPI retries the same<br /> buffer. Also free a newly allocated RX fragment when dma_map_single()<br /> fails.<br /> <br /> This issue was found by an in-house static analysis tool.

Impact