CVE-2026-74678

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()<br /> <br /> When the interface has NETIF_F_SG enabled and skb_linearize() fails in<br /> ax88179_tx_fixup(), the function returns NULL without freeing the skb.<br /> <br /> usbnet_start_xmit() treats a NULL return from tx_fixup() as a drop<br /> (info-&gt;flags does not set FLAG_MULTI_PACKET for this driver), jumping<br /> to the "drop" label where it does `if (skb) dev_kfree_skb_any(skb)`.<br /> Because tx_fixup() returned NULL, the local skb variable in<br /> usbnet_start_xmit() is NULL, so the original skb is never freed — a<br /> memory leak on every TX frame whose linearization fails (i.e. under<br /> memory pressure).<br /> <br /> Free the skb before returning, matching the error handling already used<br /> for the pskb_expand_head() failure path in the same function.