CVE-2026-74622

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: atlantic: free RX pages of consumed but not refilled buffers<br /> <br /> aq_ring_rx_deinit() only walks [sw_head, sw_tail), the region posted to<br /> hardware. Since the page reuse strategy was added, a cleaned RX buffer<br /> keeps its page (and its DMA mapping) in the ring for reuse, and refill<br /> is batched: aq_ring_rx_fill() returns early until AQ_CFG_RX_REFILL_THRES<br /> slots are free. Slots that were consumed but not yet reposted therefore<br /> sit in the complementary [sw_tail, sw_head) gap with a live page, and<br /> the deinit walk never visits them: up to a refill batch worth of pages<br /> and DMA mappings leak on every interface down.<br /> <br /> Walk the whole ring instead and release whatever is still there. Also<br /> bail out if the buffer ring is already gone: a partial<br /> aq_ptp_ring_alloc() failure frees the ring but leaves aq_nic set, so<br /> aq_ptp_ring_deinit() still gets here on the unwind path.