Riskcovery

CVE-2026-72017

net: macb: drop in-flight Tx SKBs on close

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 23, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: macb: drop in-flight Tx SKBs on close

The MACB driver has since forever leaked the outgoing SKBs that have not yet been marked as completed. They live in queue->tx_skb which gets freed without remorse nor checking.

macb_free_consistent() gets called in a few codepaths, but only close will trigger the added expressions. In macb_open() and macb_alloc_consistent() failure cases, queues' tx_skb just got allocated and are empty.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 89e5785fc8a6b9eafd37f2318a9a76d479c796be to before 0e9797dc4ebdefe1b7f931b1f92d5e98e5dbf655Affected
  • 89e5785fc8a6b9eafd37f2318a9a76d479c796be to before 6124bd785073659c99385094657b77382ebce11bAffected
  • 89e5785fc8a6b9eafd37f2318a9a76d479c796be to before 2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4Affected
  • 89e5785fc8a6b9eafd37f2318a9a76d479c796be to before 26b131b2d5b55a81ef6182769d28105a870c0eb2Affected
  • 89e5785fc8a6b9eafd37f2318a9a76d479c796be to before 109241d9880488aafd8e104832b4d4859ad57244Affected
  • 89e5785fc8a6b9eafd37f2318a9a76d479c796be to before 27f575836cfebbf872dec020428742b10650a955Affected
LinuxLinux
  • 2.6.20Affected
  • before 2.6.20Not affected
  • 6.1.184 through 6.1.*Not affected
  • 6.6.148 through 6.6.*Not affected
  • 6.12.101 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.