CVE-2026-31737

net: ftgmac100: fix ring allocation unwind on open failure

State: Published
Severity: Not scored
Published: May 1, 2026
Updated: Oct 15, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ftgmac100: fix ring allocation unwind on open failure

ftgmac100_alloc_rings() allocates rx_skbs, tx_skbs, rxdes, txdes, and rx_scratch in stages. On intermediate failures it returned -ENOMEM directly, leaking resources allocated earlier in the function.

Rework the failure path to use staged local unwind labels and free allocated resources in reverse order before returning -ENOMEM. This matches common netdev allocation cleanup style.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 184b3a500d60ea48d1b176103cff1706c456edf3Affected d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 78da43320d9d6ed788147fb085184e4fc801f057Affected d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before a7e1bf392acf11dc4209820fef75758f6e42bd65Affected d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 8a71911fc7eeea930153322bc1efc065db8cd97eAffected d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before d45230081f19c280096241353c26b0de457de795Affected d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 8351d18989c8642fc53e2e12d94e42314a39b078Affected d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 82f86111f0704ab2ded11a2033bc6cf0be3e09eaAffected d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before c0fd0fe745f5e8c568d898cd1513d0083e46204aAffected
LinuxLinux	4.12Affected before 4.12Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.168 through 6.1.Not affected 6.6.134 through 6.6.Not affected 6.12.81 through 6.12.Not affected 6.18.22 through 6.18.Not affected 6.19.12 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 184b3a500d60ea48d1b176103cff1706c456edf3Affected
d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 78da43320d9d6ed788147fb085184e4fc801f057Affected
d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before a7e1bf392acf11dc4209820fef75758f6e42bd65Affected
d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 8a71911fc7eeea930153322bc1efc065db8cd97eAffected
d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before d45230081f19c280096241353c26b0de457de795Affected
d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 8351d18989c8642fc53e2e12d94e42314a39b078Affected
d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before 82f86111f0704ab2ded11a2033bc6cf0be3e09eaAffected
d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e to before c0fd0fe745f5e8c568d898cd1513d0083e46204aAffected

LinuxLinux

4.12Affected
before 4.12Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.168 through 6.1.*Not affected
6.6.134 through 6.6.*Not affected
6.12.81 through 6.12.*Not affected
6.18.22 through 6.18.*Not affected
6.19.12 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.