CVE-2026-99057: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: don't leak the skb when xennet_fill_frags() fails When a response chain has more slots than fit in the skb's frags, xennet_fill_frags() returns an error and xennet_poll() jumps to its error path. That path moves what's left on tmpq to errq to be freed, but the skb being filled was already dequeued from tmpq, so it's never freed. Each chain that overflows leaks the skb and the pages attached to it as frags, and the backend decides how many slots it sends. Put the skb back on tmpq before taking the error path, like the xennet_set_skb_gso() failure just above it does.

Засегнати продукти

• Linux Linux: ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c преди 6e6bd1051daabc327233c3ca3d00613fc6783c8e; ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c преди 0cf0a25a639c535146c5eb4480d256995721aed6; ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c преди 53a131eb2a998c77e2851401b32b712d6c6e8487; ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c преди 5051df031144753d3e18862514969146b601d089; ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c преди 99011a11c97340ef7290df7dc199305c73fab2f2; ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c преди 086944c1c2cbb683543bc3ff08637847b03c8009; ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c преди 84e3ea6502b5f14ce8d499d0b6e0e38386274cf0; ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c преди 93ccaf1c26e2133396173b76a071e59024daa622; bd1468048aa3e2af865da92990539946d4483989; 29a6193c0d74390c004808441061ac1812cf6f51; 7eced4478f4ec6ff0a603ddfd6e24a5d3831fca7; b73a161e9beff24bf1803ba393dff95a255268f9; 4.4.159 преди 4.5; 4.9.130 преди 4.10; 4.14.73 преди 4.15; 4.18.11 преди 4.19
• Linux Linux: 4.19; преди 4.19; 5.10.273 до 5.10.*; 5.15.224 до 5.15.*; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.113 до 6.12.*; 6.18.57 до 6.18.*; 7.2.11 до 7.2.*; от 7.3 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-99057
• https://nvd.nist.gov/vuln/detail/CVE-2026-99057
• https://git.kernel.org/stable/c/6e6bd1051daabc327233c3ca3d00613fc6783c8e
• https://git.kernel.org/stable/c/0cf0a25a639c535146c5eb4480d256995721aed6
• https://git.kernel.org/stable/c/53a131eb2a998c77e2851401b32b712d6c6e8487
• https://git.kernel.org/stable/c/5051df031144753d3e18862514969146b601d089
• https://git.kernel.org/stable/c/99011a11c97340ef7290df7dc199305c73fab2f2
• https://git.kernel.org/stable/c/086944c1c2cbb683543bc3ff08637847b03c8009
• https://git.kernel.org/stable/c/84e3ea6502b5f14ce8d499d0b6e0e38386274cf0
• https://git.kernel.org/stable/c/93ccaf1c26e2133396173b76a071e59024daa622