Riskcovery

CVE-2026-99047

gve: fix XSK buffer leak when rings are stopped

State
Published
Severity
Not scored
Published
Oct 23, 2026
Updated
Oct 23, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gve: fix XSK buffer leak when rings are stopped

GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked.

Free XSK buffers attached to an allocated buf_state when stopping rings.

This issue was hit in production.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c1fffc5d66a7147d557736c2341a511e0896d9ff to before 506f9de069d07a72b9887ce3edd2fdf32f4953aaAffected
  • c1fffc5d66a7147d557736c2341a511e0896d9ff to before 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7Affected
  • c1fffc5d66a7147d557736c2341a511e0896d9ff to before 73670ddb91a4d22e1deb3efd962242de1ec48e90Affected
LinuxLinux
  • 6.17Affected
  • before 6.17Not affected
  • 6.18.57 through 6.18.*Not affected
  • 7.2.11 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.