CVE-2026-68135
Received Received - Intake

Memory Leak in Linux Kernel Hip04 Network Driver

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources. Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails. This issue was found by an in-house static analysis tool.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68135
EUVD
EUVD-2026-55516

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's hip04 network driver. When the driver fails to build a socket buffer, it incorrectly handles cleanup by leaking the current RX buffer and its DMA mapping. This overwrites slot references and causes resource leaks.

Detection Guidance

This vulnerability is specific to the Linux kernel's HIP04 network driver and may not have direct detection commands. Monitor kernel logs for errors related to hip04_rx_poll() or RX buffer failures. Check for unusual network interface errors or DMA mapping issues in system logs.

Impact Analysis

The vulnerability can lead to resource exhaustion on affected systems, causing network performance degradation or crashes. Systems using the hip04 driver may experience instability or require reboots.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this vulnerability. If immediate patching is not possible, disable the HIP04 network driver if not in use to reduce exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68135. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart