Riskcovery

CVE-2026-68135

net: hip04: fix RX buffer leak on build_skb failure

State
Published
Severity
Not scored
Published
Aug 10, 2026
Updated
Aug 19, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: hip04: fix RX buffer leak on build_skb failure

When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources.

Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails.

This issue was found by an in-house static analysis tool.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 701a0fd5231866db08cebcd502894699f49cb960 to before 690ecc13a4032e5cae1dc6659512f32b033533b0Affected
  • 701a0fd5231866db08cebcd502894699f49cb960 to before 2b19fe277645fd1aeb18fd4ecdcf31966080dee7Affected
  • 701a0fd5231866db08cebcd502894699f49cb960 to before bcd43ee1f25b682151df213c06a99b2e1c1cf2e5Affected
  • 701a0fd5231866db08cebcd502894699f49cb960 to before e054dcd990d8180cde529ea28ce0838e76a5ad5eAffected
  • 701a0fd5231866db08cebcd502894699f49cb960 to before 67a7614bde310da006ab259f4f163d3fb0f9e253Affected
  • 701a0fd5231866db08cebcd502894699f49cb960 to before 80d977f280b4eccd4ac5369871d0ecb2b9c9a49dAffected
  • 701a0fd5231866db08cebcd502894699f49cb960 to before a0f247d63489a107bbc3b712a77b302af2a2a173Affected
  • 701a0fd5231866db08cebcd502894699f49cb960 to before 14fa65d10f5696b063a7d8d26e8291ea84a2c6edAffected
LinuxLinux
  • 4.5Affected
  • before 4.5Not affected
  • 5.10.265 through 5.10.*Not affected
  • 5.15.216 through 5.15.*Not affected
  • 6.1.183 through 6.1.*Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.