Riskcovery

CVE-2026-31645

net: lan966x: fix page pool leak in error paths

State
Published
Severity
Not scored
Published
Apr 24, 2026
Updated
Oct 21, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: lan966x: fix page pool leak in error paths

lan966x_fdma_rx_alloc() creates a page pool but does not destroy it if the subsequent fdma_alloc_coherent() call fails, leaking the pool.

Similarly, lan966x_fdma_init() frees the coherent DMA memory when lan966x_fdma_tx_alloc() fails but does not destroy the page pool that was successfully created by lan966x_fdma_rx_alloc(), leaking it.

Add the missing page_pool_destroy() calls in both error paths.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 11871aba19748b3387e83a2db6360aa7119e9a1a to before a229a4dc87302fa131f3394b09b0efd8c255a5acAffected
  • 11871aba19748b3387e83a2db6360aa7119e9a1a to before 73e940c4249dc5ec6422d1fae535d192fb125955Affected
  • 11871aba19748b3387e83a2db6360aa7119e9a1a to before 22e1ee9f22b5c3bb702bb6d4167d770002a85b2bAffected
  • 11871aba19748b3387e83a2db6360aa7119e9a1a to before 4941e234cfd67ac911fb259642b453f9f76aac41Affected
  • 11871aba19748b3387e83a2db6360aa7119e9a1a to before 076344a6ad9d1308faaed1402fdcfdda68b604abAffected
LinuxLinux
  • 6.2Affected
  • before 6.2Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.82 through 6.12.*Not affected
  • 6.18.23 through 6.18.*Not affected
  • 6.19.13 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.