CVE-2026-74545

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> rtase: fix double free of multi-frag skb on DMA map failure<br /> <br /> In rtase_start_xmit(), when the head buffer DMA mapping fails after<br /> rtase_xmit_frags() has mapped all fragments, the error path clears<br /> the fragment descriptors with rtase_tx_clear_range(), which frees<br /> the skb through the last-frag slot and accounts tx_dropped. Control<br /> then falls through to the common error label, which frees the same<br /> skb a second time and counts it again.<br /> <br /> Return right after clearing the fragments when the skb owns frags;<br /> the no-frag case still drops through and frees the head skb once.