CVE-2026-64110

Analyzed Analyzed - Analysis Complete

Potential SKB Leak in Linux Kernel igc Driver

Publication date: 2026-07-19

Last updated on: 2026-08-12

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_frame() When igc_fpe_init_tx_descriptor() fails, no one takes care of an allocated skb, leaking it. [1] Use dev_kfree_skb_any() on failure. Tested on an I226 adapter with the following command, while injecting faults in igc_fpe_init_tx_descriptor() to trigger the error path. # ethtool --set-mm $DEV verify-enabled on tx-enabled on pmac-enabled on [1] unreferenced object 0xffff888113c6cdc0 (size 224): ... backtrace (crc be3d3fda): kmem_cache_alloc_node_noprof+0x3b1/0x410 __alloc_skb+0xde/0x830 igc_fpe_xmit_smd_frame.isra.0+0xad/0x1b0 igc_fpe_send_mpacket+0x37/0x90 ethtool_mmsv_verify_timer+0x15e/0x300

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-08-12

Generated

2026-08-29

AI Q&A

2026-07-19

EPSS Evaluated

2026-08-28

NVD

CVE-2026-64110

EUVD

EUVD-2026-45795

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.11 (exc)
linux	linux_kernel	From 6.16 (inc) to 6.18.34 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability is a potential skb (socket buffer) leak in the Linux kernel's igc network driver. When a function called igc_fpe_init_tx_descriptor() fails during transmission, the allocated skb is not properly freed, causing a memory leak. This happens specifically in the igc_fpe_xmit_smd_frame() function when handling certain network packets.

Detection Guidance

This vulnerability can be detected by monitoring for skb leaks in the igc driver. Use the provided ethtool command to enable fault injection and verify the error path: ethtool --set-mm $DEV verify-enabled on tx-enabled on pmac-enabled on. Check kernel logs for unreferenced skb objects or backtraces involving igc_fpe_xmit_smd_frame.

Impact Analysis

This vulnerability could lead to memory exhaustion over time as leaked skbs accumulate. It may cause system instability, performance degradation, or unexpected crashes due to running out of available memory for network operations. Systems using affected Intel I226 network adapters are particularly at risk.

Compliance Impact

This vulnerability involves a potential skb leak in the Linux kernel's igc driver when igc_fpe_init_tx_descriptor() fails. While it does not directly impact data privacy or security controls, a memory leak could lead to resource exhaustion or system instability, indirectly affecting system reliability and availability. Compliance with GDPR or HIPAA typically requires maintaining system integrity and availability, so such issues may necessitate patching to ensure ongoing compliance.

Mitigation Strategies

Apply the Linux kernel patch that fixes the skb leak in igc_fpe_xmit_smd_frame(). Ensure your system is updated to a version containing the fix. Monitor network interfaces for abnormal behavior or resource leaks.

Hi! I’m here to help you understand CVE-2026-64110. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70