CVE-2026-74525
Received Received - Intake

net: sxgbe TX ring leak on RX allocation failure

Vulnerability report for CVE-2026-74525, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init_dma_desc_rings() only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function are leaked. Rearrange error labels to clean up TX rings upon RX failures.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel occurs when RX descriptor ring allocation fails during initialization. The function init_dma_desc_rings() only frees the partially allocated RX rings and returns, but TX rings allocated earlier in the same function are not freed, leading to a memory leak.

Detection Guidance

This vulnerability involves memory leaks in the Linux kernel's sxgbe network driver when RX descriptor ring allocation fails. Detection requires checking for kernel logs or memory leaks related to the sxgbe driver. Use commands like 'dmesg | grep sxgbe' to inspect driver logs or 'cat /proc/meminfo' to monitor memory usage for anomalies.

Impact Analysis

This vulnerability can cause memory leaks in the Linux kernel, potentially leading to resource exhaustion. Systems using the affected net: sxgbe driver may experience degraded performance or crashes due to unmanaged memory usage.

Mitigation Strategies

Apply the latest Linux kernel patches that address this issue. Update your system using your package manager (e.g., 'apt upgrade' or 'yum update'). If patches are unavailable, consider disabling the sxgbe driver if not in use or monitor for memory leaks as a temporary measure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74525. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart