In the Linux kernel, the following vulnerability has been resolved:

gve: fix XSK buffer leak on error descriptor

When the error bit is set in the RX completion descriptor, the buf_state
and its attached buffer should be freed. In the case of AF_XDP ZC, the
XSK buffer was not freed, leading to a leak.

This issue was caught by LLM.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
c1fffc5d66a7147d557736c2341a511e0896d9ff affected < 06656aaa7e43ae62b673c2244d27099b8b94a70d
c1fffc5d66a7147d557736c2341a511e0896d9ff affected < 889f763874855c575429f75946132a53c573aa14
c1fffc5d66a7147d557736c2341a511e0896d9ff affected < 9fed6a8ab8a5bacba2c709cb19d2dd6d2fa9112e
Linux Linux affected
Version Status Constraints
6.17 affected —
0 unaffected < 6.17
6.18.57 unaffected ≤ 6.18.*
7.2.11 unaffected ≤ 7.2.*
7.3 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/06656aaa7e43ae62b673c2244d27099b8b94a70d cve-icon cve-icon
https://git.kernel.org/stable/c/889f763874855c575429f75946132a53c573aa14 cve-icon cve-icon
https://git.kernel.org/stable/c/9fed6a8ab8a5bacba2c709cb19d2dd6d2fa9112e cve-icon cve-icon
History

Fri, 23 Oct 2026 21:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux linux
Vendors & Products Linux linux

Fri, 23 Oct 2026 16:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Fri, 23 Oct 2026 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the buf_state and its attached buffer should be freed. In the case of AF_XDP ZC, the XSK buffer was not freed, leading to a leak. This issue was caught by LLM.
Title gve: fix XSK buffer leak on error descriptor
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-23T12:22:10.460Z

Reserved: 2026-09-25T10:25:14.388Z

Link: CVE-2026-99046

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-23T13:17:28.073

Modified: 2026-10-23T13:17:28.073

Link: CVE-2026-99046

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T21:00:08Z

Weaknesses