CVE-2026-31658

net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

State: Published
Severity: Not scored
Published: Apr 24, 2026
Updated: Oct 15, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure.

Add dev_kfree_skb_any() before returning to properly free the skb.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before ae2cd46f57f422b51aedd406ff5d75cbff401d5dAffected bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before cb1d318702fdf643061350d164250198df4116f2Affected bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before d5ec406f0543bd6cdfd563b08015fdec8c4d5712Affected bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 2eb9d67704ca8f1101f7435b85f113ede471f9f2Affected bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7Affected bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 60f462cd2716d86bd2174f9d5e035c9278f30480Affected bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 3aca300e88afe56afb000cdc4c65383014fb17f9Affected bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 6dede3967619b5944003227a5d09fdc21ed57d10Affected
LinuxLinux	3.15Affected before 3.15Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.169 through 6.1.Not affected 6.6.135 through 6.6.Not affected 6.12.82 through 6.12.Not affected 6.18.23 through 6.18.Not affected 6.19.13 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before ae2cd46f57f422b51aedd406ff5d75cbff401d5dAffected
bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before cb1d318702fdf643061350d164250198df4116f2Affected
bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before d5ec406f0543bd6cdfd563b08015fdec8c4d5712Affected
bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 2eb9d67704ca8f1101f7435b85f113ede471f9f2Affected
bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7Affected
bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 60f462cd2716d86bd2174f9d5e035c9278f30480Affected
bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 3aca300e88afe56afb000cdc4c65383014fb17f9Affected
bbd2190ce96d8fce031f0526c1f970b68adc9d1a to before 6dede3967619b5944003227a5d09fdc21ed57d10Affected

LinuxLinux

3.15Affected
before 3.15Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.169 through 6.1.*Not affected
6.6.135 through 6.6.*Not affected
6.12.82 through 6.12.*Not affected
6.18.23 through 6.18.*Not affected
6.19.13 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.