CVE-2026-64110
Received Received - Intake

Potential SKB Leak in Linux Kernel igc Driver

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_frame() When igc_fpe_init_tx_descriptor() fails, no one takes care of an allocated skb, leaking it. [1] Use dev_kfree_skb_any() on failure. Tested on an I226 adapter with the following command, while injecting faults in igc_fpe_init_tx_descriptor() to trigger the error path. # ethtool --set-mm $DEV verify-enabled on tx-enabled on pmac-enabled on [1] unreferenced object 0xffff888113c6cdc0 (size 224): ... backtrace (crc be3d3fda): kmem_cache_alloc_node_noprof+0x3b1/0x410 __alloc_skb+0xde/0x830 igc_fpe_xmit_smd_frame.isra.0+0xad/0x1b0 igc_fpe_send_mpacket+0x37/0x90 ethtool_mmsv_verify_timer+0x15e/0x300

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64110
EUVD
EUVD-2026-45795

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel igc *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a potential skb (socket buffer) leak in the Linux kernel's igc network driver. When a function called igc_fpe_init_tx_descriptor() fails during transmission, the allocated skb is not properly freed, causing a memory leak. This happens specifically in the igc_fpe_xmit_smd_frame() function when handling certain network packets.

Detection Guidance

This vulnerability can be detected by monitoring for skb leaks in the igc driver. Use the provided ethtool command to enable fault injection and verify the error path: ethtool --set-mm $DEV verify-enabled on tx-enabled on pmac-enabled on. Check kernel logs for unreferenced skb objects or backtraces involving igc_fpe_xmit_smd_frame.

Impact Analysis

This vulnerability could lead to memory exhaustion over time as leaked skbs accumulate. It may cause system instability, performance degradation, or unexpected crashes due to running out of available memory for network operations. Systems using affected Intel I226 network adapters are particularly at risk.

Compliance Impact

This vulnerability involves a potential skb leak in the Linux kernel's igc driver when igc_fpe_init_tx_descriptor() fails. While it does not directly impact data privacy or security controls, a memory leak could lead to resource exhaustion or system instability, indirectly affecting system reliability and availability. Compliance with GDPR or HIPAA typically requires maintaining system integrity and availability, so such issues may necessitate patching to ensure ongoing compliance.

Mitigation Strategies

Apply the Linux kernel patch that fixes the skb leak in igc_fpe_xmit_smd_frame(). Ensure your system is updated to a version containing the fix. Monitor network interfaces for abnormal behavior or resource leaks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64110. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart